The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver…
Priority LOW 36CWE-200Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- Complete · None · None
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-200.
Summary
The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.
Why it matters now
EPSS 0.02438 84th percentileScored 2026-11-07
Fix Fixed nova (PyPI): 12.0.0a0Red Hat: 2 advisories
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | nova (PyPI) | before 12.0.0a0 | 12.0.0a0 | Patch available | GHSA-99rx-9x8v-9j8p |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- nova (PyPI) Vendor— Affected before 12.0.0a0 Fixed in 12.0.0a0 Patch available GHSA-99rx-9x8v-9j8p
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openstack:compute:2012.2:*:*:*:*:*:*:* | 2012.2 | Vulnerable | OpenStack |
| cpe:2.3:a:openstack:compute:2013.1:*:*:*:*:*:*:* | 2013.1 | Vulnerable | OpenStack |
| cpe:2.3:a:openstack:compute:2013.1.1:*:*:*:*:*:*:* | 2013.1.1 | Vulnerable | OpenStack |
| cpe:2.3:a:openstack:compute:2013.1.2:*:*:*:*:*:*:* | 2013.1.2 | Vulnerable | OpenStack |
| cpe:2.3:a:openstack:compute:2013.1.3:*:*:*:*:*:*:* | 2013.1.3 | Vulnerable | OpenStack |
| cpe:2.3:a:openstack:grizzly:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | OpenStack |
| cpe:2.3:a:openstack:havana:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | OpenStack |
| cpe:2.3:a:openstack:icehouse:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | OpenStack |
- cpe:2.3:a:openstack:compute:2012.2:*:*:*:*:*:*:* Versions 2012.2 Vulnerable ·OpenStack
- cpe:2.3:a:openstack:compute:2013.1:*:*:*:*:*:*:* Versions 2013.1 Vulnerable ·OpenStack
- cpe:2.3:a:openstack:compute:2013.1.1:*:*:*:*:*:*:* Versions 2013.1.1 Vulnerable ·OpenStack
- cpe:2.3:a:openstack:compute:2013.1.2:*:*:*:*:*:*:* Versions 2013.1.2 Vulnerable ·OpenStack
- cpe:2.3:a:openstack:compute:2013.1.3:*:*:*:*:*:*:* Versions 2013.1.3 Vulnerable ·OpenStack
- cpe:2.3:a:openstack:grizzly:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·OpenStack
- cpe:2.3:a:openstack:havana:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·OpenStack
- cpe:2.3:a:openstack:icehouse:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·OpenStack
Remediation
- Fix · GHSA-99rx-9x8v-9j8p nova (PyPI) Fixed in 12.0.0a0 Advisory →
Red Hat 2 advisories
- RHSA-2014:0366 Released 2014-04-03 · Red Hat rating Moderateopenstack-nova security and bug fix update
- Red Hat Enterprise Linux OpenStack Platform 3.0 openstack-nova-2013.1.5-2.el6ost, openstack-nova-api-2013.1.5-2.el6ost, openstack-nova-cells-2013.1.5-2.el6ost +10
- RHSA-2014:0231 Released 2014-03-04 · Red Hat rating Moderateopenstack-nova security and bug fix update
- Red Hat Enterprise Linux OpenStack Platform 4.0 openstack-nova-2013.2.2-2.el6ost, openstack-nova-api-2013.2.2-2.el6ost, openstack-nova-cells-2013.2.2-2.el6ost +11
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux OpenStack Platform 3.0 | Fixed | RHSA-2014:0366 |
| Red Hat Enterprise Linux OpenStack Platform 4.0 | Fixed | RHSA-2014:0231 |
Timeline
- 2026-10-02 Threatist record created from CVE-2013-7130
- 2026-10-03 Alias added: GHSA-99rx-9x8v-9j8p
References
Advisory 5
Other 12
- https://review.openstack.org/#/c/68659/
- https://bugs.launchpad.net/nova/+bug/1251590
- 102416
- [oss-security] 20140124 [OSSA 2014-003] Live migration can leak root disk into ephemeral storage (CVE-2013-7130)
- https://github.com/openstack/nova/commit/15ee7e17f63f5583307a546ecf28952c364c88f9
- https://github.com/openstack/nova/commit/b0d36683fe064b32cbef013e1c0c46bd018ab9a1
- https://github.com/openstack/nova/commit/cbeb5e51886b0296349fc476305bfe3d63c627c3
- https://github.com/openstack/nova
- https://github.com/pypa/advisory-database/tree/main/vulns/nova/PYSEC-2014-111.yaml
- https://review.openstack.org/#/c/68658
- https://review.openstack.org/#/c/68659
- https://review.openstack.org/#/c/68660
More OpenStack Compute vulnerabilities
- TI-2014-00161 The Nova EC2 API security group implementation in OpenStack Compute (Nova) 2013.1 before… CVSS 2.0MEDIUM 6.0
- TI-2013-02015 Improper certificate validation in OpenStack Keystone CVSS 3.1MEDIUM 5.9
- TI-2013-03652 The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before… CVSS 2.0MEDIUM 4.3
- TI-2012-02292 The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1)… CVSS 2.0MEDIUM 4.3
- TI-2013-03658 Algorithmic complexity vulnerability in OpenStack Compute (Nova) before 2013.1.3 and… CVSS 2.0MEDIUM 4.0
- TI-2015-02371 OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local… CVSS 3.0MEDIUM 4.7
Sources
- CVE-2013-7130 · CVE Program
- CVE-2013-7130 · NVD
- FIRST EPSS
- GHSA-99rx-9x8v-9j8p · GitHub Advisory Database · CC BY 4.0
- CVE-2013-7130 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences