{"id":"CVE-2013-7130","aliases":["DEBIAN-CVE-2013-7130","EUVD-2014-0035","GHSA-99rx-9x8v-9j8p","PYSEC-2014-111","RHSA-2014:0231","RHSA-2014:0366","UBUNTU-CVE-2013-7130","USN-2247-1"],"status":"published","title":"OpenStack Nova Live migration can leak root disk into ephemeral storage","description":"The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.","severity":{"version":"2.0","score":7.1,"vector":"AV:N/AC:M/Au:N/C:C/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02438,"percentile":0.84398,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2014-02-06T00:00:00Z","modified":"2026-09-01T20:03:19Z","fixes":[{"ecosystem":"PyPI","package":"nova","fixed_in":["12.0.0a0"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"nova","fixed_in":["2013.2.2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nova","fixed_in":["2013.2.2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nova","fixed_in":["2013.2.2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0a0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2013.2.2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2013.2.2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2013.2.2"}]}]},{"source":"osv","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0a0"}]}]},{"source":"osv","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0a0"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.2-2.el6ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.2-2.el6ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-cells","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.2-2.el6ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-cert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.2-2.el6ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.2-2.el6ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.2-2.el6ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.2-2.el6ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.2-2.el6ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.2-2.el6ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.2-2.el6ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-novncproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.2-2.el6ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-objectstore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.2-2.el6ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-nova-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.2-2.el6ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"python-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.2-2.el6ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:3::el6","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.1.5-2.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:3::el6","package":"openstack-nova-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.1.5-2.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:3::el6","package":"openstack-nova-cells","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.1.5-2.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:3::el6","package":"openstack-nova-cert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.1.5-2.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:3::el6","package":"openstack-nova-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.1.5-2.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:3::el6","package":"openstack-nova-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.1.5-2.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:3::el6","package":"openstack-nova-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.1.5-2.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:3::el6","package":"openstack-nova-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.1.5-2.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:3::el6","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.1.5-2.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:3::el6","package":"openstack-nova-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.1.5-2.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:3::el6","package":"openstack-nova-objectstore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.1.5-2.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:3::el6","package":"openstack-nova-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.1.5-2.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:3::el6","package":"python-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.1.5-2.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2014.1-0ubuntu1.2"}]}],"versions":["1:2013.2~rc2-0ubuntu1","1:2013.2-0ubuntu1","1:2014.1~b1-0ubuntu1","1:2014.1~b1-0ubuntu2","1:2014.1~b2-0ubuntu3","1:2014.1~b2-0ubuntu4","1:2014.1~b3-0ubuntu1","1:2014.1~b3-0ubuntu2","1:2014.1~rc1-0ubuntu1","1:2014.1~rc2-0ubuntu1","1:2014.1-0ubuntu1"],"bundled":6}],"products":[{"vendor":"openstack","product":"compute"},{"vendor":"openstack","product":"grizzly"},{"vendor":"openstack","product":"havana"},{"vendor":"openstack","product":"icehouse"}],"references":[{"url":"https://review.openstack.org/#/c/68659/","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://review.openstack.org/#/c/68658/","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"http://www.securityfocus.com/bid/65106","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://review.openstack.org/#/c/68660/","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90652","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"https://bugs.launchpad.net/nova/+bug/1251590","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"http://secunia.com/advisories/56450","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://osvdb.org/102416","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-2247-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0231.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2014/01/23/5","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127732.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127735.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-7130","tags":["advisory"]},{"url":"https://github.com/openstack/nova/commit/15ee7e17f63f5583307a546ecf28952c364c88f9","tags":["web"]},{"url":"https://github.com/openstack/nova/commit/b0d36683fe064b32cbef013e1c0c46bd018ab9a1","tags":["web"]},{"url":"https://github.com/openstack/nova/commit/cbeb5e51886b0296349fc476305bfe3d63c627c3","tags":["web"]},{"url":"https://review.openstack.org/#/c/68658","tags":["web"]},{"url":"https://review.openstack.org/#/c/68659","tags":["web"]},{"url":"https://review.openstack.org/#/c/68660","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/nova/PYSEC-2014-111.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-99rx-9x8v-9j8p"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-7130","tags":["advisory"]},{"url":"https://github.com/openstack/nova","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0231","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1020979","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1039148","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1039554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1040786","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1043106","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1047849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1047863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1055400","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1060771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1062377","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1065317","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0231.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-6419","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-6419","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6419","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-6437","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-6437","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6437","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-7048","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-7048","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-7048","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-7130","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-7130","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0366","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1026171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1038239","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0366.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4497","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4497","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4497","tags":["advisory"]},{"url":"https://launchpad.net/bugs/1073306","tags":["article"]},{"url":"https://launchpad.net/bugs/1202266","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2013-7130","tags":["report"]},{"url":"http://lists.openstack.org/pipermail/openstack-announce/2014-January/000188.html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2247-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2013-1068","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-4463","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-4469","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-6491","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-0134","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-0167","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2013-7130","description":"The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.","status":"published","published":"2014-02-06T16:00:00Z","modified":"2024-08-06T18:01:19.335Z","updated_at":"2026-11-02T14:34:58.882751Z"}],"euvd":[{"id":"EUVD-2014-0035","description":"The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.","status":"published","published":"2014-02-06T16:00:00Z","modified":"2024-08-06T18:01:19Z","updated_at":"2026-11-03T01:56:23.942036Z"}],"ghsa":[{"id":"GHSA-99rx-9x8v-9j8p","title":"OpenStack Nova Live migration can leak root disk into ephemeral storage","description":"The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.","status":"published","published":"2022-05-17T01:29:42Z","modified":"2024-11-26T18:16:50Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:38:23.575854Z"}],"nvd":[{"id":"CVE-2013-7130","description":"The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.","status":"published","published":"2014-02-06T17:00:06.977Z","modified":"2026-06-17T00:01:27.29Z","cvss":[{"version":"2.0","score":7.1,"vector":"AV:N/AC:M/Au:N/C:C/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:48.062712Z"}],"osv":[{"id":"GHSA-99rx-9x8v-9j8p","title":"OpenStack Nova Live migration can leak root disk into ephemeral storage","description":"The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.","status":"published","published":"2022-05-17T01:29:42Z","modified":"2024-11-26T18:16:49Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:46:43.524801Z"},{"id":"CVE-2013-7130","description":"The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.","status":"published","published":"2014-02-06T17:00:06Z","modified":"2026-04-10T03:43:26.919813Z","updated_at":"2026-11-02T15:43:59.361892Z"},{"id":"DEBIAN-CVE-2013-7130","description":"The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.","status":"published","published":"2014-02-06T17:00:06.977Z","modified":"2026-09-01T20:03:19.339518623Z","updated_at":"2026-11-02T15:45:25.819707Z"},{"id":"PYSEC-2014-111","description":"The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.","status":"published","published":"2014-02-06T17:00:00Z","modified":"2024-11-25T22:42:05.941913Z","updated_at":"2026-11-02T15:52:51.645172Z"},{"id":"RHSA-2014:0231","title":"Red Hat Security Advisory: openstack-nova security and bug fix update","status":"published","published":"2024-09-15T21:23:59Z","modified":"2026-08-08T10:15:23.000716537Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"RHSA-2014:0366","title":"Red Hat Security Advisory: openstack-nova security and bug fix update","status":"published","published":"2024-09-15T21:33:41Z","modified":"2026-08-08T10:15:09.783961788Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"UBUNTU-CVE-2013-7130","description":"The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.","status":"withdrawn","published":"2014-02-06T00:00:00Z","modified":"2026-02-04T03:45:31.738486Z","updated_at":"2026-11-02T15:54:07.421078Z"},{"id":"USN-2247-1","title":"nova vulnerabilities","description":"Darragh O'Reilly discovered that the Ubuntu packaging for OpenStack Nova\ndid not properly set up its sudo configuration. If a different flaw was\nfound in OpenStack Nova, this vulnerability could be used to escalate\nprivileges. This issue only affected Ubuntu 13.10 and Ubuntu 14.04 LTS.\n(CVE-2013-1068)\n\nBernhard M. Wiedemann and Pedraig Brady discovered that OpenStack Nova did\nnot properly verify the virtual size of a QCOW2 images. A remote\nauthenticated attacker could exploit this to create a denial of service via\ndisk consumption. This issue did not affect Ubuntu 14.04 LTS.\n(CVE-2013-4463, CVE-2013-4469)\n\nJuanFra Rodriguez Cardoso discovered that OpenStack Nova did not enforce\nSSL connections when Nova was configured to use QPid and qpid_protocol is\nset to 'ssl'. If a remote attacker were able to perform a machine-in-the-middle\nattack, this flaw could be exploited to view sensitive information. Ubuntu\ndoes not use QPid with Nova by default. This issue did not affect Ubuntu\n14.04 LTS. (CVE-2013-6491)\n\nLoganathan Parthipan discovered that OpenStack Nova did not properly create\nexpected files during KVM live block migration. A remote authenticated\nattacker could exploit this to obtain root disk snapshot contents via\nephemeral storage. This issue did not affect Ubuntu 14.04 LTS.\n(CVE-2013-7130)\n\nStanislaw Pitucha discovered that OpenStack Nova did not enforce the image\nformat when rescuing an instance. A remote authenticated attacker could\nexploit this to read host files. In the default installation, attackers\nwould be isolated by the libvirt guest AppArmor profile. This issue only\naffected Ubuntu 13.10. (CVE-2014-0134)\n\nMark Heckmann discovered that OpenStack Nova did not enforce RBAC policy\nwhen adding security group rules via the EC2 API. A remote authenticated\nuser could exploit this to gain unintended access to this API. This issue\nonly affected Ubuntu 13.10. (CVE-2014-0167)\n","status":"published","published":"2014-06-17T21:50:58Z","modified":"2026-02-10T04:40:49Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}