CVE-2013-4469: openstack folsom Resource Management Errors

EPSS trend

Probability

0.44%

Chance of exploitation in the next 30 days

Percentile

37%

Versus all other CVEs

30-day change

0.00 pp

From 0.44% on 18-09-2026

18-09-202618-10-2026

EPSS score

0.44%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (bugs.launchpad.net)
Maturity: unknown

References

14 links

bugs.launchpad.net/nova/+bug/1206081X Refsource CONFIRMExploitWEB
www.openwall.com/lists/oss-security/2013/10/31/3Mailing ListX Refsource MLISTPatchWEBREPORT
www.ubuntu.com/usn/USN-2247-1Vendor AdvisoryX Refsource UBUNTUWEB
nvd.nist.gov/vuln/detail/CVE-2013-4469Advisory
github.com/openstack/nova/commit/135faa7b5d9855312bedc19e5e1ecebae34d3d18WEB
github.com/openstack/nova/commit/3cdfe894ab58f7b91bf7fb690fc5bc724e44066fWEB
github.com/openstack/nova/commit/f6810be4ae1a6c93e7d8017ee67d5344dfdf4a30WEB
github.com/openstack/novaPACKAGE
pypi.org/project/novaPACKAGE
github.com/advisories/GHSA-2w87-5qcj-j6gxAdvisory

Show all 14 references

ubuntu.com/security/CVE-2013-4469REPORT
ubuntu.com/security/notices/USN-2247-1Advisory
www.cve.org/CVERecord?id=CVE-2013-4469REPORT
security-tracker.debian.org/tracker/CVE-2013-4469Advisory

Related vulnerabilities

CVE-2013-2161debianswift+111.91%13y ago20-08-2013 22:00XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.CVE-2013-2096debiannova+40.39%13y ago09-07-2013 17:00OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by creating an image with a large virtual size that does not contain a large amount of data.CVE-2013-2030openstackcompute+40.24%12y ago27-12-2013 01:00keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.CVE-2013-1865canonicalubuntu_linux+22.63%13y ago22-03-2013 21:00OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token.CVE-2013-1664debiancinder+94.77%13y ago03-04-2013 00:00The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack.CVE-2013-1665debiankeystone+44.51%13y ago03-04-2013 00:00The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) attack.

All vulnerabilities infolsom grizzly havana

CVE-2013-4469: openstack folsom Resource Management Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References