Vulnerabilities > Openstack > Nova > 2013.1

DATE CVE VULNERABILITY TITLE RISK
2014-03-06 CVE-2013-6437 Resource Management Errors vulnerability in Openstack Nova
The libvirt driver in OpenStack Compute (Nova) before 2013.2.2 and icehouse before icehouse-2 allows remote authenticated users to cause a denial of service (disk consumption) by creating and deleting instances with unique os_type settings, which triggers the creation of a new ephemeral disk backing file.
network
low complexity
openstack CWE-399
4.0
4.0
2014-01-23 CVE-2013-7048 Permissions, Privileges, and Access Controls vulnerability in Openstack Nova
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots. 		3.3
3.3