{"id":"CVE-2013-4463","published":"2014-02-06T02:00:00Z","modified":"2024-08-06T16:45:14Z","title":"OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which…","vendor":null,"product":null,"tier":"tail","description":{"text":"OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) via a compressed QCOW2 image.  NOTE: this issue is due to an incomplete fix for CVE-2013-2096.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00372,"percentile":0.3099,"provenance":"source"},"cwes":[],"references":[{"url":"https://bugs.launchpad.net/nova/+bug/1206081","tags":["x_refsource_CONFIRM"]},{"url":"http://www.openwall.com/lists/oss-security/2013/10/31/3","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://www.ubuntu.com/usn/USN-2247-1","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0112.html","tags":["vendor-advisory","x_refsource_REDHAT"]}],"priority":{"score":6.2,"factors":[{"name":"EPSS percentile","points":6.2}]},"affected":[{"ecosystem":"PyPI","package":"nova","vulnerableRanges":["<12.0.0a0"],"patched":["12.0.0a0"],"from":["GHSA-5644-2v3h-5w4x","PYSEC-2026-865"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-2506","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-nova-cve-2013-2096","parents":[{"from":"CVE-2013-2096","to":"CVE-2013-4463","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this issue is due to an incomplete fix for CVE-2013-2096.","from":"CVE.org","in":"CVE-2013-4463"},{"kind":"same-code","provenance":"machine","files":["nova/virt/libvirt/imagebackend.py"],"commits":["https://github.com/openstack/nova/commit/0caeb8eaf20abcdc77828f5c6b79fc104619e231","https://github.com/openstack/nova/commit/44a8aba1d5da87d54db48079103fdef946666d80","https://github.com/openstack/nova/commit/3cdfe894ab58f7b91bf7fb690fc5bc724e44066f","https://github.com/openstack/nova/commit/f6810be4ae1a6c93e7d8017ee67d5344dfdf4a30"],"basis":"shared function","functions":["copy_qcow2_image"]},{"kind":"similar","provenance":"machine","score":0.82,"basis":"same package + description similarity"}]}]}}