TI-2013-02016 Aliases CVE-2013-2256 GHSA-5mj6-643f-2g85

OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly…

LOW 31CWE-264Published 2013-09-16 · Updated 2024-08-06

Key facts

Attack vector: Network
Privileges required: Low
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Medium
Impact type: Security bypass
Confidentiality · integrity · availability: Partial · Partial · Partial
Fix status: Partial Red Hat: 1 fixed, 1 without a fix

Attack profile from CVSS 2.0 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-264.

Summary

OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id.

Why it matters now

EPSS 0.01844 79th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Partial nova (PyPI): 2013.1.3Red Hat: 1 advisoryRed Hat: 1 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA
—	nova (PyPI)	before 2013.1.3	2013.1.3	Patch available	GHSA-5mj6-643f-2g85

— Vendor— Affected all versions Fixed in — No fix listed CNA
nova (PyPI) Vendor— Affected before 2013.1.3 Fixed in 2013.1.3 Patch available GHSA-5mj6-643f-2g85

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:openstack:nova::::::::	2013.1 to before 2013.1.3	Vulnerable	OpenStack
cpe:2.3:a:openstack:nova:2013.2:milestone1::::::	2013.2 milestone1	Vulnerable	OpenStack

cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:* Versions 2013.1 to before 2013.1.3 Vulnerable ·OpenStack
cpe:2.3:a:openstack:nova:2013.2:milestone1:*:*:*:*:*:* Versions 2013.2 milestone1 Vulnerable ·OpenStack

Remediation

Fix · GHSA-5mj6-643f-2g85 nova (PyPI) Fixed in 2013.1.3 Advisory →

Red Hat 1 advisory

RHSA-2013:1199 Released 2013-09-03 · Red Hat rating Moderate
openstack-nova security and bug fix update
- Red Hat Enterprise Linux OpenStack Platform 3.0 openstack-nova-2013.1.3-3.el6ost, openstack-nova-api-2013.1.3-3.el6ost, openstack-nova-cells-2013.1.3-3.el6ost +10

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat OpenStack Platform 4	Affected	No fix yet
Red Hat Enterprise Linux OpenStack Platform 3.0	Fixed	RHSA-2013:1199

Timeline

2026-10-02 Threatist record created from CVE-2013-2256
2026-10-03 Alias added: GHSA-5mj6-643f-2g85

References

Exploit 1

https://bugs.launchpad.net/nova/+bug/1194093

Patch 1

[oss-security] 20130806 [OSSA 2013-019] Resource limit circumvention in Nova private flavors (CVE-2013-2256)

Advisory 2

Other 4

TI-2026-34154 In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. CVSS 3.1HIGH 8.5
TI-2022-23762 An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and… CVSS 3.1MEDIUM 5.7
TI-2021-02596 Open redirect in openstack-nova CVSS 3.1MEDIUM 6.1
TI-2017-04900 An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3… CVSS 3.0CRITICAL 9.8
TI-2017-12516 An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. CVSS 3.0HIGH 8.6
TI-2020-13145 An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova… CVSS 3.1HIGH 8.3

See all 38 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences