PT-2017-16770
CVE-2017-5936
·
Publicado
2017-02-08
·
Atualizado
2022-05-13
Descrição por
CVSS 4.0
8.7
AltaMétricasAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
OpenStack Nova-LXD versions prior to 13.1.1
Description
The issue allows remote attackers to bypass intended security restrictions due to the wrong name being used for the veth pairs when applying Neutron security group rules for instances.
Recommendations
For versions prior to 13.1.1, update to version 13.1.1 or later to resolve the issue.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾