CVE-2012-1585 OpenStack Nova Long server names grow nova-api log files significantly
MediumCVSS 4.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
OpenStack Compute (Nova) Essex before 2011.3 allows remote authenticated users to cause a denial of service (Nova-API log file and disk consumption) via a long server name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi nova(PyPI) | < 12.0.0a0 | 12.0.0a0 |
| debian/nova(Debian:12) | < 2012-1~rc3-1 | 2012-1~rc3-1 |
| debian/nova(Debian:13) | < 2012-1~rc3-1 | 2012-1~rc3-1 |
| debian/nova(Debian:14) | < 2012-1~rc3-1 | 2012-1~rc3-1 |
| OpenStack Nova | >= 2011.1, < 2011.3 | 2011.3 |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- bugs.launchpad.net exploit third-party-advisory
- github.com product
- github.com patch
- github.com patch
- github.com patch
- github.com patch
- FEDORA-2012-5026 third-party-advisory vendor-advisory
- [Openstack] 20120329 [OSSA 2012-003] Long server names grow nova-api log files significantly (CVE-2012-1585) broken-link mailing-list
- pypi.org product
- github.com vendor-advisory
- Debian Security Tracker CVE-2012-1585 vendor-advisory
- bugs.debian.org issue-tracking