GHSA-5644-2v3h-5w4xLow

OpenStack Nova denial of service through compressed disk images

Published
May 17, 2022
Last Modified
May 14, 2024

🔗 CVE IDs covered (1)

CVE-2013-4463 →

📋 Description

OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) via a compressed QCOW2 image. NOTE: this issue is due to an incomplete fix for CVE-2013-2096.

🎯 Affected products1

  • pip/nova:< 12.0.0a0

🔗 References (8)