Resource Management Errors The advisory has been revoked - it doesn't affect any version of package openstack-nova-serialproxy  (opens in a new tab)


Threat Intelligence

EPSS
2.74% (85th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL10-OPENSTACKNOVASERIALPROXY-12302680
  • published1 Sept 2025
  • disclosed14 Mar 2013

Introduced: 14 Mar 2013

CVE-2013-1838  (opens in a new tab)
CWE-399  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream openstack-nova-serialproxy package and not the openstack-nova-serialproxy package as distributed by RHEL.

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function.