Executive brief
OpenStack Compute (Nova) does not verify the virtual size of a QCOW2 image
Affected products
- PyPI nova
Junglewise Threat Intelligence
CVE-2013-2096: PYSEC-2026-876 - OpenStack Compute (Nova) does not verify the virtual size of a QCOW2 image
CVE-2013-2096 · Severity: medium · CVSS 4 · Published 2026-07-06
Technologies: nova (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2493 - OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
- PYSEC-2026-1709 - OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
- PYSEC-2026-868 - OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
- PYSEC-2026-882 - OpenStack Nova Changing vnic_type breaks compute service restart
- PYSEC-2026-857 - OpenStack Nova can leak consoleauth token into log files