Skip to content
OpenAdvisories
High RHSA-2013:0709 2 CVEs

Red Hat Security Advisory: openstack-nova security and bug fix update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · OpenStack 2 openstack:2::el6 openstack-nova 0:2012.2.3-7.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-nova-api 0:2012.2.3-7.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-nova-cert 0:2012.2.3-7.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-nova-common 0:2012.2.3-7.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-nova-compute 0:2012.2.3-7.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-nova-console 0:2012.2.3-7.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-nova-doc 0:2012.2.3-7.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-nova-network 0:2012.2.3-7.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-nova-objectstore 0:2012.2.3-7.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-nova-scheduler 0:2012.2.3-7.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-nova-volume 0:2012.2.3-7.el6ost
Red Hat · OpenStack 2 openstack:2::el6 python-nova 0:2012.2.3-7.el6ost

Vulnerabilities 2

  • High 7.6
    CVE-2013-0335

    Openstack nova: vnc proxy can connect to the wrong vm

    OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port.

    Red Hat Red Hat OpenStack Platform 13 (Queens) Red Hat OpenStack Platform 18.0 Red Hat OpenStack Platform 16.2 Debian PyPI
  • Medium 6.5
    CVE-2013-1838

    OpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp function

    OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large …

    nova nova Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=887968
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=891349
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=910727
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=912284
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=915274
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=915586
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=916174
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=916176
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=916615
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=917534
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=919648
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0709.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-0335
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-0335
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-0335
  • article
    http://rhn.redhat.com/errata/RHSA-2013-0709.html
  • article
    http://secunia.com/advisories/52337
  • article
    http://secunia.com/advisories/52728
  • article
    http://www.openwall.com/lists/oss-security/2013/02/26/7
  • article
    http://www.osvdb.org/90657
  • article
    http://www.ubuntu.com/usn/USN-1771-1
  • article
    https://bugs.launchpad.net/nova/+bug/1125378
  • advisory
    https://github.com/advisories/GHSA-qfp8-hfqx-c79c
  • article
    https://review.openstack.org/#/c/22086/
  • article
    https://review.openstack.org/#/c/22758
  • article
    https://review.openstack.org/#/c/22872/
  • report
    https://access.redhat.com/security/cve/CVE-2013-1838
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1838
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1838