CVE-2017-5936

Description

OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allows remote attackers to bypass intended security restrictions.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

2.467

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2017-5936 are fixed in Python-nova-lxd 13.1.1	Windows
Openstack Compute - LXD container hypervisor support (USN-3195-1) python-nova-lxd_13.2.0-0ubuntu1.16.04.1_all.deb	Linux
Vulnerabilities CVE-2017-5936 are fixed in Python-nova-lxd for linux 13.1.1	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234