OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by creating an image with a large virtual size that does not contain a large amount of data.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Folsom | Openstack | - (including) | - (including) |
Grizzly | Openstack | - (including) | - (including) |
Havana | Openstack | - (including) | - (including) |
Nova | Ubuntu | devel | * |
Nova | Ubuntu | precise | * |
Nova | Ubuntu | quantal | * |
Nova | Ubuntu | raring | * |