CVE Vulnerabilities

CVE-2013-2096

Published: Jul 09, 2013 | Modified: Jan 08, 2014
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
4 MODERATE
AV:N/AC:L/Au:S/C:N/I:N/A:P
RedHat/V3
Ubuntu
MEDIUM

OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by creating an image with a large virtual size that does not contain a large amount of data.

Affected Software

Name Vendor Start Version End Version
Folsom Openstack - (including) - (including)
Grizzly Openstack - (including) - (including)
Havana Openstack - (including) - (including)
Nova Ubuntu devel *
Nova Ubuntu precise *
Nova Ubuntu quantal *
Nova Ubuntu raring *

References