CVE-2013-2096
Fixed in a distro release EPSS <1%
OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by creating an image with a large virtual size that does not contain a large amount of data.
Products: openstack folsom, openstack grizzly, openstack havana
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | nova | 12.0.0a0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | nova | 2013.1.2-2 |
| Debian 13 | nova | 2013.1.2-2 |
| Debian 14 | nova | 2013.1.2-2 |