CVE-2013-4463: Low severity red hat openstack folsom vulnerability
OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) via a compressed QCOW2 image. NOTE: this issue is due to an incomplete fix for CVE-2013-2096.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4463?
CVE-2013-4463 is considered a medium severity vulnerability as it can lead to denial of service due to excessive disk space consumption.
How do I fix CVE-2013-4463?
To fix CVE-2013-4463, upgrade to a secure version of the OpenStack Nova package above 12.0.0a0.
Which versions are affected by CVE-2013-4463?
CVE-2013-4463 affects OpenStack Compute (Nova) versions Folsom, Grizzly, and Havana.
What type of attack does CVE-2013-4463 enable?
CVE-2013-4463 allows local users to carry out a denial of service attack by consuming host file system disk space.
Is CVE-2013-4463 associated with any other vulnerabilities?
Yes, CVE-2013-4463 is related to an incomplete fix from CVE-2013-2096.