CVE 2013-2096
OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by creating an image with a large virtual size that does not contain a large amount of data.
Related bugs and status
CVE-2013-2096 (Candidate) is related to these bugs:
Bug #1177830: [OSSA 2013-012] Unchecked qcow2 root disk sizes
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 1177830 | [OSSA 2013-012] Unchecked qcow2 root disk sizes | OpenStack Compute (nova) | Critical | Fix Released | ||
| 1177830 | [OSSA 2013-012] Unchecked qcow2 root disk sizes | OpenStack Compute (nova) grizzly | Critical | Fix Released | ||
| 1177830 | [OSSA 2013-012] Unchecked qcow2 root disk sizes | OpenStack Security Advisory | Undecided | Fix Released | ||
| 1177830 | [OSSA 2013-012] Unchecked qcow2 root disk sizes | OpenStack Compute (nova) havana | Critical | Fix Released | ||
Bug #1179626: Meta bug for tracking Openstack 2013.1.1 Stable Update
Bug #1179707: Meta bug for tracking OpenStack 2012.2.4 Stable Update
Bug #1188788: Meta bug for tracking Openstack 2013.1.2 Stable Update
See the 
CVE page on Mitre.org
for more details.
