CVE-2017-15114

Advisory

When libvirtd is configured by OSP director (tripleo-heat-templates) to use the TLS transport it defaults to the same certificate authority as all non-libvirtd services. As no additional authentication is configured this allows these services to connect to libvirtd (which is equivalent to root access). If a vulnerability exists in another service it could, combined with this flaw, be exploited to escalate privileges to gain control over compute nodes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=994922a8ba996fe68d047df0e1486fa805dbea31
• http://www.securityfocus.com/bid/101971
• https://nvd.nist.gov/vuln/detail/CVE-2017-15114
• https://bugs.launchpad.net/tripleo/+bug/1730370
• https://github.com/openstack/tripleo-heat-templates/commit/645757cbd6bdb1a1b75cb4aa8acce80a178099ce
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15114