CVE-2013-7130
CVE-2013-7130
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.
CVSS 7.5 · High · EPSS 2.4% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
nova Debian:12
- Affected ranges
- ECOSYSTEM: < 2013.2.2
Update to 2013.2.2
nova Debian:13
- Affected ranges
- ECOSYSTEM: < 2013.2.2
Update to 2013.2.2
nova Debian:14
- Affected ranges
- ECOSYSTEM: < 2013.2.2
Update to 2013.2.2
nova PyPI
- Affected ranges
- ECOSYSTEM: < 12.0.0a0
Update to 12.0.0a0
Original sources
- https://review.openstack.org/#/c/68659/
- https://review.openstack.org/#/c/68658/
- http://www.securityfocus.com/bid/65106
- https://review.openstack.org/#/c/68660/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90652
- https://bugs.launchpad.net/nova/+bug/1251590
- http://secunia.com/advisories/56450
- http://osvdb.org/102416
- http://www.ubuntu.com/usn/USN-2247-1
- http://rhn.redhat.com/errata/RHSA-2014-0231.html
- http://www.openwall.com/lists/oss-security/2014/01/23/5
- http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127732.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127735.html
- https://nvd.nist.gov/vuln/detail/CVE-2013-7130