CVE-2013-2096: Openstack Folsom

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by creating an image with a large virtual size that does not contain a large amount of data.

Affected products

• Openstack Folsom: affected versions not specified
• Openstack Grizzly: affected versions not specified
• Openstack Havana: affected versions not specified

Published 2013-07-09. Last modified 2026-06-16.