Lucene search
HistoryJul 09, 2013 - 5:55 p.m.
CVE-2013-2096
openstack compute
nova
qcow2
image validation
denial of service
security vulnerability
nvd
cve-2013-2096
5.8 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
0.0004 Low
EPSS
Percentile
5.2%
OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by creating an image with a large virtual size that does not contain a large amount of data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openstack:havana | openstack havana | eq | - |
| openstack:grizzly | openstack grizzly | eq | - |
| openstack:folsom | openstack folsom | eq | - |
Related
nessus
nessus
Ubuntu 12.04 LTS / 12.10 / 13.04 : nova vulnerability (USN-1831-1)
2013-05-17 00:00:00
Fedora 19 : novnc-0.4-7.fc19 / openstack-nova-2013.1.2-4.fc19 (2013-13244)
2013-07-29 00:00:00
Fedora 20 : openstack-nova-2013.2-4.fc20 (2013-22667)
2013-12-14 00:00:00
openvas
openvas
Ubuntu Update for nova USN-1831-1
2013-05-17 00:00:00
Fedora Update for novnc FEDORA-2013-13244
2013-08-20 00:00:00
Ubuntu: Security Advisory (USN-1831-1)
2013-05-17 00:00:00
securityvulns
securityvulns
[USN-1831-1] OpenStack Nova vulnerability
2013-06-17 00:00:00
OpenStack multiple security vulnerabilities
2013-07-01 00:00:00
ubuntucve
ubuntucve
debiancve
debiancve
fedora
fedora
[SECURITY] Fedora 19 Update: openstack-nova-2013.1.2-4.fc19
2013-07-29 00:26:41
[SECURITY] Fedora 19 Update: novnc-0.4-7.fc19
2013-07-29 00:26:40
[SECURITY] Fedora 20 Update: openstack-nova-2013.2.1-2.fc20
2014-01-07 09:34:58
prion
prion
Design/Logic Flaw
2013-07-09 17:55:00
Design/Logic Flaw
2014-02-06 05:44:00
Design/Logic Flaw
2013-11-02 18:55:00
ubuntu
ubuntu
OpenStack Nova vulnerability
2013-05-16 00:00:00
cve
cve
CVE-2013-4463
2014-02-06 05:44:00
CVE-2013-4469
2013-11-02 18:55:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:55:52
5.8 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2013-2096