Every CVE Search/ Get API key

CVE-2013-0335

Openstack nova: vnc proxy can connect to the wrong vm

7.6 HighFix available

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
High
Availability
Low

Exploit likelihood

2.14%Up 0.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

CVE List Score used 7.6

Openstack nova: vnc proxy can connect to the wrong vm

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port.

Record
CVE-2013-0335
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Weakness
CWE-613
Updated
2026-11-02
EUVDEUVD-2013-0022 7.6

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port.

Record
EUVD-2013-0022
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Updated
2026-11-02
GitHub AdvisoriesGHSA-qfp8-hfqx-c79c 7.1

OpenStack Compute Nova Unauthorised access to arbitrary VM using VNC token from deleted VM

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port.

Record
GHSA-qfp8-hfqx-c79c
CVSS 4.0
7.1 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-863
Updated
2026-11-02
NVD 7.6

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port.

Record
CVE-2013-0335
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
CVSS 2.0
6.0 MediumAV:N/AC:M/Au:S/C:P/I:P/A:P
Weakness
CWE-613, CWE-264
Updated
2026-11-02
OSVDEBIAN-CVE-2013-0335 7.6

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port.

Record
DEBIAN-CVE-2013-0335
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Updated
2026-11-02
OSVGHSA-qfp8-hfqx-c79c 7.1

OpenStack Compute Nova Unauthorised access to arbitrary VM using VNC token from deleted VM

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port.

Record
GHSA-qfp8-hfqx-c79c
CVSS 4.0
7.1 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-863
Updated
2026-11-02
OSVRHSA-2013:0709 7.6

Red Hat Security Advisory: openstack-nova security and bug fix update

Record
RHSA-2013:0709
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Updated
2026-11-02
OSV No score

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port.

Record
CVE-2013-0335
Updated
2026-11-02
OSVPYSEC-2013-43 No score

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port.

Record
PYSEC-2013-43
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
nova
PyPI
 before 12.0.0a0
12.0.0a0
nova
Debian:12
 before 2012.1.1-14
2012.1.1-14
nova
Debian:13
 before 2012.1.1-14
2012.1.1-14
nova
Debian:14
 before 2012.1.1-14
2012.1.1-14
openstack-nova
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost
openstack-nova-api
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost
openstack-nova-cert
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost
openstack-nova-common
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost
openstack-nova-compute
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost
openstack-nova-console
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost
Show 6 moreShow less
Affected packages
PackageAffectedFixed
openstack-nova-doc
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost
openstack-nova-network
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost
openstack-nova-objectstore
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost
openstack-nova-scheduler
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost
openstack-nova-volume
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost
python-nova
Red Hat:openstack:2::el6
From an advisory covering 2 CVEs
 before 0:2012.2.3-7.el6ost
0:2012.2.3-7.el6ost

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-0335 is a high vulnerability (CVSS 7.6) in Openstack Essex, published March 22, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.14%, the 82nd percentile. Fixed in nova 12.0.0a0.

References

Show 31 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open