CVE-2013-2096

2013-07-0917:55:01

CWE-399

[email protected]

web.nvd.nist.gov

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

AI Score

5.9

Confidence

High

EPSS

Percentile

5.1%

JSON

OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by creating an image with a large virtual size that does not contain a large amount of data.

Affected configurations

Nvd

Node

openstackfolsomMatch-

openstackgrizzlyMatch-

openstackhavanaMatch-

VendorProductVersionCPE
openstackfolsom-cpe:2.3:a:openstack:folsom:-:*:*:*:*:*:*:*
openstackgrizzly-cpe:2.3:a:openstack:grizzly:-:*:*:*:*:*:*:*
openstackhavana-cpe:2.3:a:openstack:havana:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
openstack	folsom	-	cpe:2.3:a:openstack:folsom:-:::::::*
openstack	grizzly	-	cpe:2.3:a:openstack:grizzly:-:::::::*
openstack	havana	-	cpe:2.3:a:openstack:havana:-:::::::*