Lucene search

K
cve[email protected]CVE-2013-7130
HistoryFeb 06, 2014 - 5:00 p.m.

CVE-2013-7130

2014-02-0617:00:00
CWE-200
web.nvd.nist.gov
24
openstack compute
nova
grizzly
havana
icehouse
libvirt
kvm
live block migration
security vulnerability
nvd
cve-2013-7130

6 Medium

AI Score

Confidence

Low

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

0.008 Low

EPSS

Percentile

80.9%

The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.

6 Medium

AI Score

Confidence

Low

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

0.008 Low

EPSS

Percentile

80.9%