CVE-2013-7130: Openstack Compute

High severity, CVSS 7.1. EPSS: 2.4% chance of exploitation in the next 30 days.

The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.

Affected products

• Openstack Compute: version 2012.2 only; version 2013.1 only; version 2013.1.1 only; version 2013.1.2 only; version 2013.1.3 only
• Openstack Grizzly: affected versions not specified
• Openstack Havana: affected versions not specified
• Openstack Icehouse: affected versions not specified

Published 2014-02-06. Last modified 2026-06-17.