Nova-LXD vulnerability

2017-02-1000:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.6

Confidence

High

EPSS

0.003

Percentile

70.7%

JSON

Releases

Ubuntu 16.04 ESM

Packages

nova-lxd - Openstack Compute - LXD container hypervisor support

Details

James Page discovered that Nova-LXD incorrectly set up virtual network devices
when creating LXD instances. This could result in an unintended firewall
configuration.

OSVersionArchitecturePackageVersionFilename
Ubuntu16.04noarchpython-nova-lxd< 13.2.0-0ubuntu1.16.04.1UNKNOWN
Ubuntu16.04noarchnova-compute-lxd< 13.2.0-0ubuntu1.16.04.1UNKNOWN
Ubuntu16.04noarchpython-nova.lxd< 13.2.0-0ubuntu1.16.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	16.04	noarch	python-nova-lxd	< 13.2.0-0ubuntu1.16.04.1	UNKNOWN
Ubuntu	16.04	noarch	nova-compute-lxd	< 13.2.0-0ubuntu1.16.04.1	UNKNOWN
Ubuntu	16.04	noarch	python-nova.lxd	< 13.2.0-0ubuntu1.16.04.1	UNKNOWN