CVE-2013-4463 describes a denial-of-service vulnerability in OpenStack Compute (Nova) Folsom, Grizzly, and Havana. The flaw stems from Nova's failure to properly verify the virtual size of QCOW2 images, allowing a local attacker to consume host file system disk space using a compressed QCOW2 image. This issue is a partial fix for CVE-2013-2096. The vulnerability has a low severity CVSS score of 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P), indicating local access, low attack complexity, no authentication required, and only a partial impact on availability. Its FAUCET Risk Score is 5/100, and its EPSS score is very low, suggesting minimal exploitability in the wild. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage are also non-existent, indicating a lack of widespread attention or concern regarding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:openstack:folsom:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:openstack:grizzly:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:openstack:havana:-:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:N/I:N/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.6 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.