CVE-2013-4261
OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend...
CVE-2013-4261 is a low vulnerability (CVSS 3.5) in Openstack Folsom, published October 29, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.74%, the 77th percentile. Fixed in nova 2013.2-1.
OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.
Exploit likelihood
What each source reports
NVD Score used
3.5
OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.
- Record
CVE-2013-4261- CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.
- Record
CVE-2013-4261- Updated
- 2026-11-02
EUVDEUVD-2013-4161 No score
OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.
- Record
EUVD-2013-4161- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6h2f-6j38-qxpp No score
OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend...
OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.
- Record
GHSA-6h2f-6j38-qxpp- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.
- Record
CVE-2013-4261- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-4261 No score
OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.
- Record
DEBIAN-CVE-2013-4261- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
novaDebian:12 |
before 2013.2-1 | 2013.2-1 |
novaDebian:13 |
before 2013.2-1 | 2013.2-1 |
novaDebian:14 |
before 2013.2-1 | 2013.2-1 |
openstack-novaRed Hat:openstack:3::el6 |
before 0:2013.1.3-3.el6ost | 0:2013.1.3-3.el6ost |
openstack-nova-apiRed Hat:openstack:3::el6 |
before 0:2013.1.3-3.el6ost | 0:2013.1.3-3.el6ost |
openstack-nova-cellsRed Hat:openstack:3::el6 |
before 0:2013.1.3-3.el6ost | 0:2013.1.3-3.el6ost |
openstack-nova-certRed Hat:openstack:3::el6 |
before 0:2013.1.3-3.el6ost | 0:2013.1.3-3.el6ost |
openstack-nova-commonRed Hat:openstack:3::el6 |
before 0:2013.1.3-3.el6ost | 0:2013.1.3-3.el6ost |
openstack-nova-computeRed Hat:openstack:3::el6 |
before 0:2013.1.3-3.el6ost | 0:2013.1.3-3.el6ost |
openstack-nova-conductorRed Hat:openstack:3::el6 |
before 0:2013.1.3-3.el6ost | 0:2013.1.3-3.el6ost |
Show 6 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openstack-nova-consoleRed Hat:openstack:3::el6 |
before 0:2013.1.3-3.el6ost | 0:2013.1.3-3.el6ost |
openstack-nova-docRed Hat:openstack:3::el6 |
before 0:2013.1.3-3.el6ost | 0:2013.1.3-3.el6ost |
openstack-nova-networkRed Hat:openstack:3::el6 |
before 0:2013.1.3-3.el6ost | 0:2013.1.3-3.el6ost |
openstack-nova-objectstoreRed Hat:openstack:3::el6 |
before 0:2013.1.3-3.el6ost | 0:2013.1.3-3.el6ost |
openstack-nova-schedulerRed Hat:openstack:3::el6 |
before 0:2013.1.3-3.el6ost | 0:2013.1.3-3.el6ost |
python-novaRed Hat:openstack:3::el6 |
before 0:2013.1.3-3.el6ost | 0:2013.1.3-3.el6ost |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
seclists.org/oss-sec/2013/q3/595
rhn.redhat.com/errata/RHSA-2013-1199.html
bugzilla.redhat.com/show_bug.cgi?id=999271
bugs.launchpad.net/nova/+bug/1215091
bugzilla.redhat.com/show_bug.cgi?id=999164
nvd.nist.gov/vuln/detail/CVE-2013-4261
Show 25 moreShow less
github.com/advisories/GHSA-6h2f-6j38-qxpp
security-tracker.debian.org/tracker/CVE-2013-4261
access.redhat.com/errata/RHSA-2013:1199
access.redhat.com/security/updates/classification
rhn.redhat.com/errata/RHSA-2013-0657.html
bugzilla.redhat.com/show_bug.cgi?id=971188
bugzilla.redhat.com/show_bug.cgi?id=975882
bugzilla.redhat.com/show_bug.cgi?id=989707
bugzilla.redhat.com/show_bug.cgi?id=993331
bugzilla.redhat.com/show_bug.cgi?id=993340
bugzilla.redhat.com/show_bug.cgi?id=997649
bugzilla.redhat.com/show_bug.cgi?id=997840
bugzilla.redhat.com/show_bug.cgi?id=998598
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1199.json
access.redhat.com/security/cve/CVE-2013-2256
cve.org/CVERecord?id=CVE-2013-2256
nvd.nist.gov/vuln/detail/CVE-2013-2256
access.redhat.com/security/cve/CVE-2013-4179
cve.org/CVERecord?id=CVE-2013-4179
nvd.nist.gov/vuln/detail/CVE-2013-4179
access.redhat.com/security/cve/CVE-2013-4185
cve.org/CVERecord?id=CVE-2013-4185
nvd.nist.gov/vuln/detail/CVE-2013-4185
access.redhat.com/security/cve/CVE-2013-4261
cve.org/CVERecord?id=CVE-2013-4261