← Vulnerability feed

Vulnerability record · CVE-2012-2101 · published 7 June 2012

CVE-2012-2101: Openstack nova permissions and access controls vulnerability

Openstack · Nova

Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.

3.5 CVSS 2.0 Low EPSS 1.5% · top 27.0% CWE-264 · Permissions and access controls
3.5CVSS 2.0 base score
1.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
24References
16 Jun 2026Last modified by NVD

Description

Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.

AV:N/AC:M/Au:S/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079434.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079551.html
http://secunia.com/advisories/49034 Vendor Advisory
http://secunia.com/advisories/49048 Vendor Advisory
http://ubuntu.com/usn/usn-1438-1
http://www.osvdb.org/81641
https://bugs.launchpad.net/nova/+bug/969545
https://exchange.xforce.ibmcloud.com/vulnerabilities/75243
https://github.com/openstack/nova/commit/1f644d210557b1254f7c7b39424b09a45329ade7
https://github.com/openstack/nova/commit/8c8735a73afb16d5856f0aa6088e9ae406c52beb
https://github.com/openstack/nova/commit/a67db4586f70ed881d65e80035b2a25be195ce64
https://lists.launchpad.net/openstack/msg10268.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079434.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079551.html
http://secunia.com/advisories/49034 Vendor Advisory
http://secunia.com/advisories/49048 Vendor Advisory
http://ubuntu.com/usn/usn-1438-1
http://www.osvdb.org/81641
https://bugs.launchpad.net/nova/+bug/969545
https://exchange.xforce.ibmcloud.com/vulnerabilities/75243
https://github.com/openstack/nova/commit/1f644d210557b1254f7c7b39424b09a45329ade7
https://github.com/openstack/nova/commit/8c8735a73afb16d5856f0aa6088e9ae406c52beb
https://github.com/openstack/nova/commit/a67db4586f70ed881d65e80035b2a25be195ce64
https://lists.launchpad.net/openstack/msg10268.html

Track CVE-2012-2101 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2017-7214Openstack nova sensitive information in log file vulnerabilityAn issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notificat…EPSS 2.3%8.6CVE-2011-3147Openstack nova information exposure vulnerabilityVersions of nova before 2012.1 could expose hypervisor host files to a guest operating system when processing a maliciously constructed qcow filesyst…EPSS 0.74%8.6CVE-2017-17051Openstack nova uncontrolled resource consumption vulnerabilityAn issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticat…EPSS 2.0%8.5CVE-2026-46448Openstack nova vulnerabilityIn OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.EPSS 0.46%8.3CVE-2020-17376Openstack nova xml external entity (xxe) vulnerabilityAn issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a so…EPSS 1.7%7.5CVE-2017-18191Openstack nova vulnerabilityAn issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an encrypted volume, an attacker …EPSS 3.7%7.5CVE-2015-5162Openstack cinder vulnerabilityThe image parser in OpenStack Cinder 7.0.2 and 8.0.0 through 8.1.1; Glance before 11.0.1 and 12.0.0; and Nova before 12.0.4 and 13.0.0 does not prope…EPSS 3.1%6.8CVE-2015-3280Openstack nova vulnerabilityOpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allo…EPSS 3.4%

Source: NIST National Vulnerability Database (record CVE-2012-2101), CISA KEV, FIRST EPSS (scores of 2026-10-02). This page is refreshed as NVD updates the record.