CVE-2013-0335: Openstack nova: vnc proxy can connect to the wrong vm

Severity: high (CVSS 7.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-03-22 · updated 2026-07-31
Weakness: CWE-613

Description

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port.

Affected products

Canonical Ubuntu Linux: 11.10, 12.04, 12.10
OpenStack Essex: 2012.1
OpenStack Folsom: 2012.2
OpenStack Grizzly: 2012.2

References

http://rhn.redhat.com/errata/RHSA-2013-0709.html
http://secunia.com/advisories/52337
http://secunia.com/advisories/52728
http://www.openwall.com/lists/oss-security/2013/02/26/7
http://www.osvdb.org/90657
http://www.ubuntu.com/usn/USN-1771-1
https://access.redhat.com/errata/RHSA-2013:0709
https://access.redhat.com/security/cve/CVE-2013-0335
https://bugs.launchpad.net/nova/+bug/1125378
https://github.com/advisories/GHSA-qfp8-hfqx-c79c
https://review.openstack.org/#/c/22086/
https://review.openstack.org/#/c/22758

Get alerted when CVE-2013-0335 or the next vulnerability affects your stack