CVE-2013-7130

2014-02-0600:00:00

ubuntu.com

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

0.008 Low

EPSS

Percentile

81.0%

JSON

The i_create_images_and_backing (aka create_images_and_backing) method in
libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse,
when using KVM live block migration, does not properly create all expected
files, which allows attackers to obtain snapshot root disk contents of
other users via ephemeral storage.

Bugs

Notes

Author	Note
mdeslaur	OSSA 2014-003
jdstrand	saucy needs no change rebuild for saucy-security Folsom and Essex are affected, but need further backporting

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchnova< 2012.1.3+stable-20130423-e52e6912-0ubuntu1.4UNKNOWN
ubuntu13.10noarchnova< 1:2013.2.3-0ubuntu1.2UNKNOWN