CVE-2013-7130
Fixed in a distro release EPSS 2%
The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.
Products: openstack compute, openstack grizzly, openstack havana, openstack icehouse
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | nova | 12.0.0a0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | nova | 2013.2.2 |
| Debian 13 | nova | 2013.2.2 |
| Debian 14 | nova | 2013.2.2 |
| Red Hat openstack 3 | openstack-nova | 0:2013.1.5-2.el6ost |
| Red Hat openstack 3 | openstack-nova-api | 0:2013.1.5-2.el6ost |
| Red Hat openstack 3 | openstack-nova-cells | 0:2013.1.5-2.el6ost |
| Red Hat openstack 3 | openstack-nova-cert | 0:2013.1.5-2.el6ost |
| Red Hat openstack 3 | openstack-nova-common | 0:2013.1.5-2.el6ost |
| Red Hat openstack 3 | openstack-nova-compute | 0:2013.1.5-2.el6ost |
| Red Hat openstack 3 | openstack-nova-conductor | 0:2013.1.5-2.el6ost |
| Red Hat openstack 3 | openstack-nova-console | 0:2013.1.5-2.el6ost |
| Red Hat openstack 3 | openstack-nova-doc | 0:2013.1.5-2.el6ost |
| Red Hat openstack 3 | openstack-nova-network | 0:2013.1.5-2.el6ost |
| Red Hat openstack 3 | openstack-nova-objectstore | 0:2013.1.5-2.el6ost |
| Red Hat openstack 3 | openstack-nova-scheduler | 0:2013.1.5-2.el6ost |
| Red Hat openstack 3 | python-nova | 0:2013.1.5-2.el6ost |
| Red Hat openstack 4 | openstack-nova | 0:2013.2.2-2.el6ost |
| Red Hat openstack 4 | openstack-nova-api | 0:2013.2.2-2.el6ost |
| Red Hat openstack 4 | openstack-nova-cells | 0:2013.2.2-2.el6ost |
| Red Hat openstack 4 | openstack-nova-cert | 0:2013.2.2-2.el6ost |
| Red Hat openstack 4 | openstack-nova-common | 0:2013.2.2-2.el6ost |
| Red Hat openstack 4 | openstack-nova-compute | 0:2013.2.2-2.el6ost |
| Red Hat openstack 4 | openstack-nova-conductor | 0:2013.2.2-2.el6ost |
| Red Hat openstack 4 | openstack-nova-console | 0:2013.2.2-2.el6ost |
| Red Hat openstack 4 | openstack-nova-doc | 0:2013.2.2-2.el6ost |
| Red Hat openstack 4 | openstack-nova-network | 0:2013.2.2-2.el6ost |
| Red Hat openstack 4 | openstack-nova-novncproxy | 0:2013.2.2-2.el6ost |
| Red Hat openstack 4 | openstack-nova-objectstore | 0:2013.2.2-2.el6ost |
| Red Hat openstack 4 | openstack-nova-scheduler | 0:2013.2.2-2.el6ost |
| Red Hat openstack 4 | python-nova | 0:2013.2.2-2.el6ost |
| Ubuntu 14.04 LTS | nova | 1:2014.1-0ubuntu1.2 |