CVE-2013-7130
2 advisories.
PyPI/nova CVE-2013-7130: high 7.5
OpenStack Nova Live migration can leak root disk into ephemeral storage
Action: Upgrade nova to 12.0.0a0 or later.
pip install nova==12.0.0a0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.0.0a0 | - |
Fixed versions
| 12.0.0a0 |
Sources
- osv: GHSA-99rx-9x8v-9j8p
- https://nvd.nist.gov/vuln/detail/CVE-2013-7130
- https://github.com/openstack/nova/commit/15ee7e17f63f5583307a546ecf28952c364c88f9
- https://github.com/openstack/nova/commit/b0d36683fe064b32cbef013e1c0c46bd018ab9a1
- https://github.com/openstack/nova/commit/cbeb5e51886b0296349fc476305bfe3d63c627c3
- https://bugs.launchpad.net/nova/+bug/1251590
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90652
- https://github.com/openstack/nova
- https://github.com/pypa/advisory-database/tree/main/vulns/nova/PYSEC-2014-111.yaml
- https://review.openstack.org/#/c/68658
- https://review.openstack.org/#/c/68659
- https://review.openstack.org/#/c/68660
- http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127732.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127735.html
- http://osvdb.org/102416
- http://rhn.redhat.com/errata/RHSA-2014-0231.html
- http://www.openwall.com/lists/oss-security/2014/01/23/5
- http://www.ubuntu.com/usn/USN-2247-1
CVE-2013-7130 · published · modified · JSON
PyPI/nova CVE-2013-7130: unknown
The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not proper
Action: Upgrade nova to 12.0.0a0 or later.
pip install nova==12.0.0a0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.0.0a0 | - |
Fixed versions
| 12.0.0a0 |
Sources
- osv: PYSEC-2014-111
- http://osvdb.org/102416
- https://review.openstack.org/#/c/68658/
- http://www.securityfocus.com/bid/65106
- http://www.openwall.com/lists/oss-security/2014/01/23/5
- https://review.openstack.org/#/c/68659/
- http://secunia.com/advisories/56450
- https://bugs.launchpad.net/nova/+bug/1251590
- https://review.openstack.org/#/c/68660/
- http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127732.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127735.html
- http://rhn.redhat.com/errata/RHSA-2014-0231.html
- http://www.ubuntu.com/usn/USN-2247-1
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90652
CVE-2013-7130 · published · modified · JSON