~ / search / GHSA-5644-2v3h-5w4x

GHSA-5644-2v3h-5w4x

OpenStack Nova denial of service through compressed disk images

Source: GitHub Advisory Database (reviewed) Low CVE-2013-4463

Packages

EcosystemPackageAffectedFixed in
PyPI nova < 12.0.0a0 12.0.0a0

Details

As written in the advisory (Markdown source, shown as plain text).

OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) via a compressed QCOW2 image. NOTE: this issue is due to an incomplete fix for CVE-2013-2096.

References

External links from the advisory. They lead to third-party sites.