CVE-2017-5936

EPSS 2.47%
Published 12.04.2017 22:59:00
Last modified 20.04.2025 01:37:25
Source cve@mitre.org
Teams watchlist Login
Open Login

OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allows remote attackers to bypass intended security restrictions.

Affected products Warnungen 0 Metrics 3 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Canonical ≫ Ubuntu Linux Version16.04 SwEditionlts

Openstack ≫ Nova-lxd Version <= 13.1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	2.47%	0.838

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

http://www.openwall.com/lists/oss-security/2017/02/09/3

Patch

Third Party Advisory

Mailing List

http://www.securityfocus.com/bid/96182

Third Party Advisory

VDB Entry

http://www.ubuntu.com/usn/USN-3195-1

Third Party Advisory

https://bugs.launchpad.net/nova-lxd/+bug/1656847

Patch

Third Party Advisory

Issue Tracking

https://github.com/openstack/nova-lxd/commit/1b76cefb92081efa1e88cd8f330253f857028bd2

Patch

Third Party Advisory

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2017-5936

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-5936

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-5936

EUVD