VULNERABILITY INTELLIGENCE
CVE-2013-6437
CVSS score4 MEDIUM
EPSS probability2.04%
CISA KEVNot currently listed
Published2014-03-06
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:N/I:N/A:P
Description
The libvirt driver in OpenStack Compute (Nova) before 2013.2.2 and icehouse before icehouse-2 allows remote authenticated users to cause a denial of service (disk consumption) by creating and deleting instances with unique os_type settings, which triggers the creation of a new ephemeral disk backing file.
Primary references
- secalert@redhat.com — Patch, Vendor Advisory
- secalert@redhat.com — Third Party Advisory
- secalert@redhat.com — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory