Vulnerability-Lookup

UBUNTU-CVE-2013-4469 (CVE-2013-4469)

Vulnerability from osv_ubuntu – Published: 2013-11-02 00:00 – Updated: 2025-07-16 04:50 – Source website

Withdrawn 2025-07-18

Details

OpenStack Compute (Nova) Folsom, Grizzly, and Havana, when use_cow_images is set to False, does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by transferring an image with a large virtual size that does not contain a large amount of data from Glance. NOTE: this issue is due to an incomplete fix for CVE-2013-2096.

Severity

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2013-4469	REPORT
	http://www.openwall.com/lists/oss-security/2013/10/31/3	REPORT
	https://ubuntu.com/security/notices/USN-2247-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2013-4469	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "nova-ajax-console-proxy",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-api",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-api-ec2",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-api-metadata",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-api-os-compute",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-api-os-volume",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-baremetal",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-cells",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-cert",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-common",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-compute",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-compute-kvm",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-compute-lxc",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-compute-qemu",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-compute-uml",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-compute-xen",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-conductor",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-console",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-consoleauth",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-doc",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-network",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-novncproxy",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-objectstore",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-scheduler",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-spiceproxy",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-volume",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "nova-xvpvncproxy",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          },
          {
            "binary_name": "python-nova",
            "binary_version": "1:2014.1~b1-0ubuntu2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "nova",
        "purl": "pkg:deb/ubuntu/nova@1:2014.1~b1-0ubuntu2?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:2014.1~b1-0ubuntu2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:2013.2~rc2-0ubuntu1",
        "1:2013.2-0ubuntu1",
        "1:2014.1~b1-0ubuntu1"
      ]
    }
  ],
  "aliases": [],
  "details": "OpenStack Compute (Nova) Folsom, Grizzly, and Havana, when use_cow_images is set to False, does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by transferring an image with a large virtual size that does not contain a large amount of data from Glance. NOTE: this issue is due to an incomplete fix for CVE-2013-2096.",
  "id": "UBUNTU-CVE-2013-4469",
  "modified": "2025-07-16T04:50:19Z",
  "published": "2013-11-02T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2013-4469"
    },
    {
      "type": "REPORT",
      "url": "http://www.openwall.com/lists/oss-security/2013/10/31/3"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-2247-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4469"
    }
  ],
  "related": [
    "USN-2247-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2013-4469"
  ],
  "withdrawn": "2025-07-18T16:42:55Z"
}

CVE-2013-4469 (GCVE-0-2013-4469)

Vulnerability from cvelistv5 – Published: 2013-11-02 18:00 – Updated: 2024-08-06 16:45

Summary

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

3 references

URL	Tags
https://bugs.launchpad.net/nova/+bug/1206081	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2013/10/31/3	mailing-listx_refsource_MLIST
http://www.ubuntu.com/usn/USN-2247-1	vendor-advisoryx_refsource_UBUNTU

Date Public

2013-10-31 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T16:45:14.301Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.launchpad.net/nova/+bug/1206081"
          },
          {
            "name": "[oss-security] 20131031 [OSSA 2013-029] Potential Nova denial of service through compressed disk images (CVE-2013-4463, CVE-2013-4469)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2013/10/31/3"
          },
          {
            "name": "USN-2247-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2247-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-10-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "OpenStack Compute (Nova) Folsom, Grizzly, and Havana, when use_cow_images is set to False, does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by transferring an image with a large virtual size that does not contain a large amount of data from Glance.  NOTE: this issue is due to an incomplete fix for CVE-2013-2096."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2014-06-19T14:57:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.launchpad.net/nova/+bug/1206081"
        },
        {
          "name": "[oss-security] 20131031 [OSSA 2013-029] Potential Nova denial of service through compressed disk images (CVE-2013-4463, CVE-2013-4469)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2013/10/31/3"
        },
        {
          "name": "USN-2247-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2247-1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2013-4469",
    "datePublished": "2013-11-02T18:00:00.000Z",
    "dateReserved": "2013-06-12T00:00:00.000Z",
    "dateUpdated": "2024-08-06T16:45:14.301Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

USN-2247-1 (UBUNTU-CVE-2013-1068)

Vulnerability from osv_ubuntu – Published: 2014-06-17 21:50 – Updated: 2026-02-10 04:40 – Source website

Summary

nova vulnerabilities

Details

Darragh O'Reilly discovered that the Ubuntu packaging for OpenStack Nova did not properly set up its sudo configuration. If a different flaw was found in OpenStack Nova, this vulnerability could be used to escalate privileges. This issue only affected Ubuntu 13.10 and Ubuntu 14.04 LTS. (CVE-2013-1068)

Bernhard M. Wiedemann and Pedraig Brady discovered that OpenStack Nova did not properly verify the virtual size of a QCOW2 images. A remote authenticated attacker could exploit this to create a denial of service via disk consumption. This issue did not affect Ubuntu 14.04 LTS. (CVE-2013-4463, CVE-2013-4469)

JuanFra Rodriguez Cardoso discovered that OpenStack Nova did not enforce SSL connections when Nova was configured to use QPid and qpid_protocol is set to 'ssl'. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could be exploited to view sensitive information. Ubuntu does not use QPid with Nova by default. This issue did not affect Ubuntu 14.04 LTS. (CVE-2013-6491)

Loganathan Parthipan discovered that OpenStack Nova did not properly create expected files during KVM live block migration. A remote authenticated attacker could exploit this to obtain root disk snapshot contents via ephemeral storage. This issue did not affect Ubuntu 14.04 LTS. (CVE-2013-7130)

Stanislaw Pitucha discovered that OpenStack Nova did not enforce the image format when rescuing an instance. A remote authenticated attacker could exploit this to read host files. In the default installation, attackers would be isolated by the libvirt guest AppArmor profile. This issue only affected Ubuntu 13.10. (CVE-2014-0134)

Mark Heckmann discovered that OpenStack Nova did not enforce RBAC policy when adding security group rules via the EC2 API. A remote authenticated user could exploit this to gain unintended access to this API. This issue only affected Ubuntu 13.10. (CVE-2014-0167)

References

URL

Type

	https://ubuntu.com/security/notices/USN-2247-1	ADVISORY
	https://ubuntu.com/security/CVE-2013-1068	REPORT
	https://ubuntu.com/security/CVE-2013-4463	REPORT
	https://ubuntu.com/security/CVE-2013-4469	REPORT
	https://ubuntu.com/security/CVE-2013-6491	REPORT
	https://ubuntu.com/security/CVE-2013-7130	REPORT
	https://ubuntu.com/security/CVE-2014-0134	REPORT
	https://ubuntu.com/security/CVE-2014-0167	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2013-1068",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "nova-ajax-console-proxy",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-api",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-api-ec2",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-api-metadata",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-api-os-compute",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-api-os-volume",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-baremetal",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-cells",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-cert",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-common",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-compute",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-compute-kvm",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-compute-libvirt",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-compute-lxc",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-compute-qemu",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-compute-vmware",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-compute-xen",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-conductor",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-console",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-consoleauth",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-network",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-novncproxy",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-objectstore",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-scheduler",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-spiceproxy",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-volume",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "nova-xvpvncproxy",
            "binary_version": "1:2014.1-0ubuntu1.2"
          },
          {
            "binary_name": "python-nova",
            "binary_version": "1:2014.1-0ubuntu1.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "nova",
        "purl": "pkg:deb/ubuntu/nova@1:2014.1-0ubuntu1.2?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:2014.1-0ubuntu1.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:2013.2~rc2-0ubuntu1",
        "1:2013.2-0ubuntu1",
        "1:2014.1~b1-0ubuntu1",
        "1:2014.1~b1-0ubuntu2",
        "1:2014.1~b2-0ubuntu3",
        "1:2014.1~b2-0ubuntu4",
        "1:2014.1~b3-0ubuntu1",
        "1:2014.1~b3-0ubuntu2",
        "1:2014.1~rc1-0ubuntu1",
        "1:2014.1~rc2-0ubuntu1",
        "1:2014.1-0ubuntu1"
      ]
    }
  ],
  "aliases": [],
  "details": "Darragh O\u0027Reilly discovered that the Ubuntu packaging for OpenStack Nova\ndid not properly set up its sudo configuration. If a different flaw was\nfound in OpenStack Nova, this vulnerability could be used to escalate\nprivileges. This issue only affected Ubuntu 13.10 and Ubuntu 14.04 LTS.\n(CVE-2013-1068)\n\nBernhard M. Wiedemann and Pedraig Brady discovered that OpenStack Nova did\nnot properly verify the virtual size of a QCOW2 images. A remote\nauthenticated attacker could exploit this to create a denial of service via\ndisk consumption. This issue did not affect Ubuntu 14.04 LTS.\n(CVE-2013-4463, CVE-2013-4469)\n\nJuanFra Rodriguez Cardoso discovered that OpenStack Nova did not enforce\nSSL connections when Nova was configured to use QPid and qpid_protocol is\nset to \u0027ssl\u0027. If a remote attacker were able to perform a machine-in-the-middle\nattack, this flaw could be exploited to view sensitive information. Ubuntu\ndoes not use QPid with Nova by default. This issue did not affect Ubuntu\n14.04 LTS. (CVE-2013-6491)\n\nLoganathan Parthipan discovered that OpenStack Nova did not properly create\nexpected files during KVM live block migration. A remote authenticated\nattacker could exploit this to obtain root disk snapshot contents via\nephemeral storage. This issue did not affect Ubuntu 14.04 LTS.\n(CVE-2013-7130)\n\nStanislaw Pitucha discovered that OpenStack Nova did not enforce the image\nformat when rescuing an instance. A remote authenticated attacker could\nexploit this to read host files. In the default installation, attackers\nwould be isolated by the libvirt guest AppArmor profile. This issue only\naffected Ubuntu 13.10. (CVE-2014-0134)\n\nMark Heckmann discovered that OpenStack Nova did not enforce RBAC policy\nwhen adding security group rules via the EC2 API. A remote authenticated\nuser could exploit this to gain unintended access to this API. This issue\nonly affected Ubuntu 13.10. (CVE-2014-0167)\n",
  "id": "USN-2247-1",
  "modified": "2026-02-10T04:40:49Z",
  "published": "2014-06-17T21:50:58Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-2247-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2013-1068"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2013-4463"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2013-4469"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2013-6491"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2013-7130"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2014-0134"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2014-0167"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "nova vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2013-1068",
    "UBUNTU-CVE-2013-4463",
    "UBUNTU-CVE-2013-4469",
    "UBUNTU-CVE-2013-6491",
    "UBUNTU-CVE-2013-7130",
    "UBUNTU-CVE-2014-0134",
    "UBUNTU-CVE-2014-0167"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

UBUNTU-CVE-2013-4469 (CVE-2013-4469)

CVE-2013-4469 (GCVE-0-2013-4469)

USN-2247-1 (UBUNTU-CVE-2013-1068)

Tags

Sightings

Nomenclature

Related by attack behaviour