CVE-2013-6437

The libvirt driver in OpenStack Compute (Nova) before 2013.2.2 and icehouse before icehouse-2 allows remote authenticated users to cause a denial of service (disk consumption) by creating and deleting instances with unique os_type settings, which triggers the creation of a new ephemeral disk backing file.

• CWE-399

• http://lists.openstack.org/pipermail/openstack-announce/2013-December/000179.htmlPatch, Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0231.htmlThird Party Advisory
• https://bugs.launchpad.net/nova/+bug/1253980Third Party Advisory
• http://lists.openstack.org/pipermail/openstack-announce/2013-December/000179.htmlPatch, Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0231.htmlThird Party Advisory
• https://bugs.launchpad.net/nova/+bug/1253980Third Party Advisory

Published

Mar 6, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-6431The fib6_add function in net/ipv6/ip6_fib.c in the Linux ker…
• CVE-2013-6432The ping_recvmsg function in net/ipv4/ping.c in the Linux ke…
• CVE-2013-6433The default configuration in the Red Hat openstack-neutron p…
• CVE-2013-6434The remote-viewer in Red Hat Enterprise Virtualization Manag…
• CVE-2013-6435Race condition in RPM 4.11.1 and earlier allows remote attac…
• CVE-2013-6436The lxcDomainGetMemoryParameters method in lxc/lxc_driver.c …
• CVE-2013-6438The dav_xml_get_cdata function in main/util.c in the mod_dav…
• CVE-2013-6439Candlepin in Red Hat Subscription Asset Manager 1.0 through …
• CVE-2013-6440The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML …
• CVE-2013-6441The lxc-sshd template (templates/lxc-sshd.in) in LXC before …
• CVE-2013-6442The owner_set function in smbcacls.c in smbcacls in Samba 4.…
• CVE-2013-6443CloudForms 3.0 Management Engine before 5.2.1.6 allows remot…