OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by creating an image with a large virtual size that does not contain a large amount of data.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image,
    which allows local users to cause a denial of service (host file system disk consumption) by creating an
    image with a large virtual size that does not contain a large amount of data. (CVE-2013-2096)

- Ensure we don't boot oversized images (CVE-2013-4463 and     CVE-2013-2096)

    - Require ipmitool for baremetal driver (#1022243)

    - Remove cert and scheduler hard dependency on       cinderclient (#1031679)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix CVE-2013-4469 and CVE-2013-4463 Fix CVE-2013-4469 and CVE-2013-4463

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Update to the latest Grizzly stable 2013.1.2

    - Fix CVE-2013-2096

    - Move openstack-nova-novncproxy from novnc to       openstack-nova

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Loganathan Parthipan discovered that Nova did not verify the size of QCOW2 instance storage. An authenticated attacker could exploit this to cause a denial of service by creating an image with a large virtual size with little data, then filling the virtual disk.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
433030	SCA: security update for nova (GHSA-m674-hmx2-ffhq)	Tenable Cloud Security	SCA Checks	medium
433030	SCA: security update for nova (GHSA-m674-hmx2-ffhq)	Tenable Self-Hosted Container Security	SCA Checks	medium
71418	Fedora 20 : openstack-nova-2013.2-4.fc20 (2013-22667)	Nessus	Fedora Local Security Checks	low
71363	Fedora 19 : openstack-nova-2013.1.4-3.fc19 (2013-22693)	Nessus	Fedora Local Security Checks	low
69095	Fedora 19 : novnc-0.4-7.fc19 / openstack-nova-2013.1.2-4.fc19 (2013-13244)	Nessus	Fedora Local Security Checks	low
66496	Ubuntu 12.04 LTS / 12.10 / 13.04 : nova vulnerability (USN-1831-1)	Nessus	Ubuntu Local Security Checks	low

Detections

Analytics

CVE-2013-2096

medium

Tenable Plugins

medium

medium

low

low

low

low