CVE-2012-1585

Description

OpenStack Compute (Nova) Essex before 2011.3 allows remote authenticated users to cause a denial of service (Nova-API log file and disk consumption) via a long server name.

How to fix CVE-2012-1585

To remediate CVE-2012-1585, upgrade the affected package to a fixed version below.

• PyPI/nova—upgrade to 12.0.0a0 or later
• PyPI/nova—upgrade to 12.0.0a0 or later

Is CVE-2012-1585 being exploited?

Low — EPSS is 2.1%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

• from 0, < 12.0.0a0
• from 0, < 12.0.0a0

References (11)

• ADVISORYgithub.com/advisories/GHSA-pjvw-p2v5-wf6q
• ADVISORYnvd.nist.gov/vuln/detail/CVE-2012-1585
• PATCHgithub.com/openstack/nova
• PATCHpypi.org/project/nova
• WEBgithub.com