CVE-2017-5936: OpenStack Nova-LXD Neutron Security Group Bypass
Summary
CVE-2017-5936: OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allows remote attackers to bypass intended security restrictions. Affects nova-lxd across 2 version ranges.
< 1b76cefb92081efa1e88cd8f330253f857028bd2
< 13.1.1
Fixed in 1b76cefb92081efa1e88cd8f330253f857028bd2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenStack Nova-LXD is a package available on PyPI that provides integration between OpenStack Nova and LXD containers. It allows users to launch LXD containers as instances within an OpenStack environment. Nova-LXD uses Neutron security groups to enforce network security policies for these instances.
Vulnerability Detail
The vulnerability (CVE-2017-5936) in OpenStack Nova-LXD before version 13.1.1 arises from the incorrect naming of veth pairs when applying Neutron security group rules for instances. This flaw enables remote attackers to bypass the intended security restrictions imposed by the security groups. By exploiting this vulnerability, an attacker can potentially gain unauthorized access to resources or perform malicious actions within the affected OpenStack environment.
How To Fix
Minimum fixed version
1b76cefb92081efa1e88cd8f330253f857028bd2
This is the first release that contains the fix.
pip install --upgrade "nova-lxd==1b76cefb92081efa1e88cd8f330253f857028bd2"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability (CVE-2017-5936) in OpenStack Nova-LXD allows remote attackers to bypass Neutron security group rules, potentially leading to unauthorized access or malicious actions within the affected environment. It is recommended to upgrade to version 13.1.1 or later of the Nova-LXD package to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for nova-lxd →
FAQ
The vulnerability allows remote attackers to bypass Neutron security group rules in OpenStack Nova-LXD, potentially leading to unauthorized access or malicious actions within the affected environment.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your version of Nova-LXD is affected by this vulnerability. Simply provide your Pipfile.lock and it will analyze and alert you in real-time.
There are no known public exploits available for this vulnerability at the time of this report.
There is no evidence of active exploitation of this vulnerability reported at the time of this report.
You can find more information about this vulnerability in the OpenStack Nova-LXD advisory database: https://github.com/pypa/advisory-database/blob/main/vulns/nova-lxd/PYSEC-2017-21.yaml
Related vulnerabilities
Recent vulnerabilities recorded for nova-lxd.
