Skip to content
OpenAdvisories
Unscored RHSA-2013:1199 4 CVEs

Red Hat Security Advisory: openstack-nova security and bug fix update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 13

ReleasePackageFixed in
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova 0:2013.1.3-3.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova-api 0:2013.1.3-3.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova-cells 0:2013.1.3-3.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova-cert 0:2013.1.3-3.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova-common 0:2013.1.3-3.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova-compute 0:2013.1.3-3.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova-conductor 0:2013.1.3-3.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova-console 0:2013.1.3-3.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova-doc 0:2013.1.3-3.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova-network 0:2013.1.3-3.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova-objectstore 0:2013.1.3-3.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-nova-scheduler 0:2013.1.3-3.el6ost
Red Hat · OpenStack 3 openstack:3::el6 python-nova 0:2013.1.3-3.el6ost

Vulnerabilities 4

  • Medium —
    CVE-2013-2256

    OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information

    OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and pos…

    nova nova Debian PyPI
  • Medium —
    CVE-2013-4179

    OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack

    The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is …

    nova nova Debian PyPI
  • Medium —
    CVE-2013-4185

    OpenStack Nova Denial of Service in network source security groups

    Algorithmic complexity vulnerability in OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users to cause a denial of service (nova-netwo…

    nova nova Debian PyPI
  • Unscored —
    CVE-2013-4261

    OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly ha…

    nova Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://rhn.redhat.com/errata/RHSA-2013-0657.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=971188
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975882
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=989707
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=993331
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=993340
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=997649
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=997840
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=998598
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=999271
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1199.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-2256
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-2256
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-2256
  • report
    https://access.redhat.com/security/cve/CVE-2013-4179
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4179
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4179
  • report
    https://access.redhat.com/security/cve/CVE-2013-4185
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4185
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4185
  • report
    https://access.redhat.com/security/cve/CVE-2013-4261
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4261
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4261