PT-2017-16770
CVE-2017-5936
·
Published
2017-02-08
·
Updated
2022-05-13
Description by
CVSS 4.0
8.7
HighMetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
OpenStack Nova-LXD versions prior to 13.1.1
Description
The issue allows remote attackers to bypass intended security restrictions due to the wrong name being used for the veth pairs when applying Neutron security group rules for instances.
Recommendations
For versions prior to 13.1.1, update to version 13.1.1 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾