PyPI/nova CVE-2013-7130: unknown, EPSS 2.44%
The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not proper
Action: Upgrade nova to 12.0.0a0 or later.
pip install nova==12.0.0a0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.0.0a0 | - |
Fixed versions
| 12.0.0a0 |
Sources
- osv: PYSEC-2014-111
- http://osvdb.org/102416
- https://review.openstack.org/#/c/68658/
- http://www.securityfocus.com/bid/65106
- http://www.openwall.com/lists/oss-security/2014/01/23/5
- https://review.openstack.org/#/c/68659/
- http://secunia.com/advisories/56450
- https://bugs.launchpad.net/nova/+bug/1251590
- https://review.openstack.org/#/c/68660/
- http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127732.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127735.html
- http://rhn.redhat.com/errata/RHSA-2014-0231.html
- http://www.ubuntu.com/usn/USN-2247-1
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90652
CVE-2013-7130 · published · modified · JSON