CVE-2013-4469: Openstack Folsom

Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days.

OpenStack Compute (Nova) Folsom, Grizzly, and Havana, when use_cow_images is set to False, does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by transferring an image with a large virtual size that does not contain a large amount of data from Glance. NOTE: this issue is due to an incomplete fix for CVE-2013-2096.

Affected products

• Openstack Folsom: affected versions not specified
• Openstack Grizzly: affected versions not specified
• Openstack Havana: affected versions not specified

Published 2013-11-02. Last modified 2026-06-16.