OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nova | Jul 30, 2024 | Mar 22, 2013 |
| Suse | — | Upgrade openstack-keystoneUpgrade openstack-swift-objectUpgrade openstack-dashboard-testUpgrade openstack-cinder-schedulerUpgrade openstack-cinderUpgrade openstack-nova-docUpgrade openstack-cinder-volumeUpgrade openstack-glance-testUpgrade openstack-nova-volumeUpgrade python-cinderclientUpgrade openstack-cinder-testUpgrade python-novaUpgrade openstack-swift-proxyUpgrade openstack-nova-testUpgrade openstack-cinder-docUpgrade openstack-quantum-docUpgrade openstack-cinder-apiUpgrade openstack-nova-objectstoreUpgrade python-cinderUpgrade python-quantumUpgrade openstack-swift-accountUpgrade python-swiftUpgrade python-django_openstack_authUpgrade openstack-nova-vncproxyUpgrade openstack-glanceUpgrade openstack-swiftUpgrade openstack-swift-docUpgrade openstack-nova-certUpgrade openstack-nova-computeUpgrade python-keystoneclient-testUpgrade openstack-quantum-testUpgrade openstack-keystone-testUpgrade python-keystoneclientUpgrade python-keystoneUpgrade openstack-quickstartUpgrade openstack-quantumUpgrade python-keystoneclient-docUpgrade openstack-swift-containerUpgrade python-horizonUpgrade openstack-dashboardUpgrade python-glanceUpgrade openstack-nova-novncproxyUpgrade openstack-glance-docUpgrade openstack-nova-apiUpgrade openstack-keystone-docUpgrade openstack-nova-networkUpgrade openstack-swift-testUpgrade openstack-novaUpgrade python-cinderclient-testUpgrade python-cinderclient-docUpgrade openstack-nova-scheduler | Dec 12, 2013 | Mar 22, 2013 |
| Ubuntu | — | Upgrade python-nova | Nov 8, 2024 | Mar 22, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub