CVEvulnerability

CVE-2017-2637

10.0 CRITICAL Published 2018-07-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-07-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.9 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
CVSS 3.0 ([email protected])
10.0 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-306

Description

A design flaw issue was found in the Red Hat OpenStack Platform director use of TripleO to enable libvirtd based live-migration. Libvirtd is deployed by default (by director) listening on 0.0.0.0 (all interfaces) with no-authentication or encryption. Anyone able to make a TCP connection to any compute host IP address, including 127.0.0.1, other loopback interface addresses, or in some cases possibly addresses that have been exposed beyond the management interface, could use this to open a virsh session to the libvirtd instance and gain control of virtual machine instances or possibly take over the host.

Affected configurations

• redhat openstack 7.0 • redhat openstack 8 • redhat openstack 9 • redhat openstack 10

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References