VULNERABILITY INTELLIGENCE

CVE-2013-4185

CVSS score4 MEDIUM
EPSS probability2.10%
CISA KEVNot currently listed
Published2013-10-29
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:N/I:N/A:P

Description

Algorithmic complexity vulnerability in OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users to cause a denial of service (nova-network consumption) via a large number of server-creation operations, which triggers a large number of update requests.

Primary references