CVE-2013-4261

OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging…

published October 29, 2013

CVSS
—
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is

OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01738 · 77.5th percentile
Published
2013-10-29T22:00Z
EPSS history
Timeline
  • 29 OCT 22:00Z
    OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging…
    cvelistv5