CVE-2013-1838: Canonical Ubuntu Linux

Medium severity, CVSS 4.0. EPSS: 2.7% chance of exploitation in the next 30 days.

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function.

Affected products

• Canonical Ubuntu Linux: version 11.10 only; version 12.04 only; version 12.10 only
• Openstack Essex: version 2012.1 only
• Openstack Folsom: version 2012.2 only
• Openstack Grizzly: version 2012.2 only

Published 2013-03-22. Last modified 2026-06-16.