CVE Vulnerabilities

CVE-2013-6437

Published: Mar 06, 2014 | Modified: Nov 16, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

The libvirt driver in OpenStack Compute (Nova) before 2013.2.2 and icehouse before icehouse-2 allows remote authenticated users to cause a denial of service (disk consumption) by creating and deleting instances with unique os_type settings, which triggers the creation of a new ephemeral disk backing file.

Affected Software

Name Vendor Start Version End Version
Nova Openstack 2013.1 (including) 2013.1.5 (excluding)
Nova Openstack 2013.2 (including) 2013.2.2 (excluding)
Nova Openstack 2014.1-milestone1 (including) 2014.1-milestone1 (including)

References