LWN.net Logo

openstack-nova: denial of service

Package(s):nova CVE #(s):CVE-2013-2096
Created:May 17, 2013 Updated:July 29, 2013
Description:

From the Ubuntu advisory:

Loganathan Parthipan discovered that Nova did not verify the size of QCOW2 instance storage. An authenticated attacker could exploit this to cause a denial of service by creating an image with a large virtual size with little data, then filling the virtual disk.

Alerts:
Ubuntu USN-1831-1 2013-05-16
Ubuntu USN-1831-2 2013-05-28
Fedora FEDORA-2013-13244 2013-07-29
Fedora FEDORA-2013-13244 2013-07-29

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds