CVE-2012-1585

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-08-17 · updated 2026-06-16
Weakness: CWE-399

Description

OpenStack Compute (Nova) Essex before 2011.3 allows remote authenticated users to cause a denial of service (Nova-API log file and disk consumption) via a long server name.

Affected products

OpenStack Nova: from 2011.1 before 2011.3 — fixed in 2011.3

How to fix

Upgrade to a fixed version: OpenStack Nova 2011.3. Check the vendor advisory for mitigations.

References

http://lwn.net/Alerts/491298/
http://osdir.com/ml/openstack-cloud-computing/2012-03/msg01133.html
https://bugs.launchpad.net/nova/+bug/962515
http://lwn.net/Alerts/491298/
http://osdir.com/ml/openstack-cloud-computing/2012-03/msg01133.html
https://bugs.launchpad.net/nova/+bug/962515

Get alerted when CVE-2012-1585 or the next vulnerability affects your stack