CVE-2013-4463 in Grizzly
Summary
OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) via a compressed QCOW2 image. NOTE: this issue is due to an incomplete fix for CVE-2013-2096.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
06/12/2013
Disclosure
02/06/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 66327 | OpenStack Grizzly File System resource management | 399 | Not defined | Official fix | CVE-2013-4463 |