CVE-2013-7130
- State
- Published
- Severity
- Not scored
- Published
- Feb 6, 2014
- Updated
- Aug 6, 2024
- Reserved
- Dec 17, 2013
Description
The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://review.openstack.org/#/c/68659/
- https://review.openstack.org/#/c/68658/
- 65106vdb-entry
- https://review.openstack.org/#/c/68660/
- openstack-cve20137130-info-disc(90652)vdb-entry
- https://bugs.launchpad.net/nova/+bug/1251590
- 56450third-party-advisory
- 102416vdb-entry
- USN-2247-1vendor-advisory
- RHSA-2014:0231vendor-advisory
- [oss-security] 20140124 [OSSA 2014-003] Live migration can leak root disk into ephemeral storage (CVE-2013-7130)mailing-list
- FEDORA-2014-1463vendor-advisory
- FEDORA-2014-1516vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.