CVE-2013-7130

Currently unrated

Key Information:

Vendor
Openstack
Status
Compute
Havana
Grizzly
Icehouse
Vendor
CVE Published:
6 February 2014

Summary

The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.

References

https://review.openstack.org/#/c/68659/
x_refsource_CONFIRM
https://review.openstack.org/#/c/68658/
x_refsource_CONFIRM
http://www.securityfocus.com/bid/65106
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.