Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:11027
HistoryJan 15, 2019 - 8:55 a.m.

Denial Of Service (DoS)

2019-01-1508:55:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

openstack-nova is vulnerable to denial of service (DoS) attacks. The vulnerability exists as OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) via a compressed QCOW2 image. NOTE: this issue is due to an incomplete fix for CVE-2013-2096.

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P