UBUNTU-CVE-2013-7130

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2013-7130

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2013/UBUNTU-CVE-2013-7130.json

JSON Data

https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2013-7130

Related

Published

2014-02-06T00:00:00Z

Modified

2014-02-06T00:00:00Z

Summary

[none]

Details

The icreateimagesandbacking (aka createimagesand_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.

References

Affected packages

Ubuntu:14.04:LTS / nova

Package

Name: nova
Purl: pkg:deb/ubuntu/nova?arch=src?distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2014.1~b3-0ubuntu2

Affected versions

1:2013.*

1:2013.2~rc2-0ubuntu1

1:2013.2-0ubuntu1

1:2014.*

1:2014.1~b1-0ubuntu1

1:2014.1~b1-0ubuntu2

1:2014.1~b2-0ubuntu3

1:2014.1~b2-0ubuntu4

1:2014.1~b3-0ubuntu1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-ajax-console-proxy"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-api"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-api-ec2"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-api-metadata"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-api-os-compute"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-api-os-volume"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-baremetal"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-cells"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-cert"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-common"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-compute"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-compute-kvm"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-compute-libvirt"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-compute-lxc"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-compute-qemu"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-compute-vmware"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-compute-xen"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-conductor"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-console"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-consoleauth"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-doc"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-network"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-novncproxy"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-objectstore"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-scheduler"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-spiceproxy"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-volume"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "nova-xvpvncproxy"
        },
        {
            "binary_version": "1:2014.1~b3-0ubuntu2",
            "binary_name": "python-nova"
        }
    ]
}