CVE-2013-4185

Algorithmic complexity vulnerability in OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users to cause a denial of service (nova-network consumption) via a large number of server-creation operations, which triggers a large number of update requests.

• CWE-310

• http://rhn.redhat.com/errata/RHSA-2013-1199.htmlVendor Advisory
• http://seclists.org/oss-sec/2013/q3/282Patch, Third Party Advisory
• https://bugs.launchpad.net/nova/+bug/1184041Exploit, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1199.htmlVendor Advisory
• http://seclists.org/oss-sec/2013/q3/282Patch, Third Party Advisory
• https://bugs.launchpad.net/nova/+bug/1184041Exploit, Third Party Advisory

Published

Oct 29, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-4179The security group extension in OpenStack Compute (Nova) Gri…
• CVE-2013-4180The (1) power and (2) ipmi_boot actions in the HostControlle…
• CVE-2013-4181Cross-site scripting (XSS) vulnerability in the addAlert fun…
• CVE-2013-4182app/controllers/api/v1/hosts_controller.rb in Foreman before…
• CVE-2013-4183The clear_volume function in LVMVolumeDriver driver in OpenS…
• CVE-2013-4184Perl module Data::UUID from CPAN version 1.219 vulnerable to…5.5
• CVE-2013-4186Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-4187The Flippy module 7.x-1.x before 7.x-1.2 for Drupal does not…6.5
• CVE-2013-4188traverser.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, …
• CVE-2013-4189Multiple unspecified vulnerabilities in (1) dataitems.py, (2…
• CVE-2013-4190Multiple cross-site scripting (XSS) vulnerabilities in (1) s…
• CVE-2013-4191zip.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.…