CVE-2013-6437: Openstack Nova

Medium severity, CVSS 4.0. EPSS: 2% chance of exploitation in the next 30 days.

The libvirt driver in OpenStack Compute (Nova) before 2013.2.2 and icehouse before icehouse-2 allows remote authenticated users to cause a denial of service (disk consumption) by creating and deleting instances with unique os_type settings, which triggers the creation of a new ephemeral disk backing file.

Affected products

• Openstack Nova: from 2013.1, before 2013.1.5 (fixed in 2013.1.5); from 2013.2, before 2013.2.2 (fixed in 2013.2.2); version 2014.1 only

Published 2014-03-06. Last modified 2026-06-17.