CVE-2013-6437
Medium
Description
The libvirt driver in OpenStack Compute (Nova) before 2013.2.2 and icehouse before icehouse-2 allows remote authenticated users to cause a denial of service (disk consumption) by creating and deleting instances with unique os_type settings, which triggers the creation of a new ephemeral disk backing file.
SeverityMedium
CVSS4.0
Exploit probability—
ProductOpenstack Nova
PublishedMar 6, 2014
First seenMar 6, 2014
How to fix
Update
- openstack nova2013.1.5, 2013.2.2 or later
- nova12.0.0a0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openstack nova | 2013.1 ≤ v < 2013.1.5, 2013.2 ≤ v < 2013.2.2, 2014.1 | 2013.1.5, 2013.2.2 |
| novaPyPI | v < 12.0.0a0 | 12.0.0a0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.