Every CVE Search/ Get API key

CVE-2013-4261

OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend...

3.5 LowFix available

CVE-2013-4261 is a low vulnerability (CVSS 3.5) in Openstack Folsom, published October 29, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.74%, the 77th percentile. Fixed in nova 2013.2-1.

OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.

Exploit likelihood

1.74%Up 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 3.5

OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.

Record
CVE-2013-4261
CVSS 2.0
3.5 LowAV:N/AC:M/Au:S/C:N/I:N/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.

Record
CVE-2013-4261
Updated
2026-11-02
EUVDEUVD-2013-4161 No score

OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.

Record
EUVD-2013-4161
Updated
2026-11-03
GitHub AdvisoriesGHSA-6h2f-6j38-qxpp No score

OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend...

OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.

Record
GHSA-6h2f-6j38-qxpp
Weakness
CWE-119
Updated
2026-11-02
OSV No score

OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.

Record
CVE-2013-4261
Updated
2026-11-02
OSVDEBIAN-CVE-2013-4261 No score

OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.

Record
DEBIAN-CVE-2013-4261
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
nova
Debian:12
before 2013.2-1
2013.2-1
nova
Debian:13
before 2013.2-1
2013.2-1
nova
Debian:14
before 2013.2-1
2013.2-1
openstack-nova
Red Hat:openstack:3::el6
before 0:2013.1.3-3.el6ost
0:2013.1.3-3.el6ost
openstack-nova-api
Red Hat:openstack:3::el6
before 0:2013.1.3-3.el6ost
0:2013.1.3-3.el6ost
openstack-nova-cells
Red Hat:openstack:3::el6
before 0:2013.1.3-3.el6ost
0:2013.1.3-3.el6ost
openstack-nova-cert
Red Hat:openstack:3::el6
before 0:2013.1.3-3.el6ost
0:2013.1.3-3.el6ost
openstack-nova-common
Red Hat:openstack:3::el6
before 0:2013.1.3-3.el6ost
0:2013.1.3-3.el6ost
openstack-nova-compute
Red Hat:openstack:3::el6
before 0:2013.1.3-3.el6ost
0:2013.1.3-3.el6ost
openstack-nova-conductor
Red Hat:openstack:3::el6
before 0:2013.1.3-3.el6ost
0:2013.1.3-3.el6ost
Show 6 moreShow less
Affected packages
PackageAffectedFixed
openstack-nova-console
Red Hat:openstack:3::el6
before 0:2013.1.3-3.el6ost
0:2013.1.3-3.el6ost
openstack-nova-doc
Red Hat:openstack:3::el6
before 0:2013.1.3-3.el6ost
0:2013.1.3-3.el6ost
openstack-nova-network
Red Hat:openstack:3::el6
before 0:2013.1.3-3.el6ost
0:2013.1.3-3.el6ost
openstack-nova-objectstore
Red Hat:openstack:3::el6
before 0:2013.1.3-3.el6ost
0:2013.1.3-3.el6ost
openstack-nova-scheduler
Red Hat:openstack:3::el6
before 0:2013.1.3-3.el6ost
0:2013.1.3-3.el6ost
python-nova
Red Hat:openstack:3::el6
before 0:2013.1.3-3.el6ost
0:2013.1.3-3.el6ost

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 25 moreShow less
MoveEnter Open