Login Request a demo
Critical severity · published Jul 26, 2018
CVE-2017-2637
A design flaw issue was found in the Red Hat OpenStack Platform director use of TripleO to enable libvirtd based live-migration
10.0
CVSS
4.6%
EPSS
No
On KEV
Description
A design flaw issue was found in the Red Hat OpenStack Platform director use of TripleO to enable libvirtd based live-migration. Libvirtd is deployed by default (by director) listening on 0.0.0.0 (all interfaces) with no-authentication or encryption. Anyone able to make a TCP connection to any compute host IP address, including 127.0.0.1, other loopback interface addresses, or in some cases possibly addresses that have been exposed beyond the management interface, could use this to open a virsh session to the libvirtd instance and gain control of virtual machine instances or possibly take over the host.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)4.6% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openstack · Redhat
7.0; 8; 9; 10 · source: NVD
Affected product
OP
Openstack
Redhat
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-2637
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-2637
Third Party Advisory
http://www.securityfocus.com/bid/98576
Vendor Advisory
https://access.redhat.com/errata/RHSA-2017:1242
Vendor Advisory
https://access.redhat.com/errata/RHSA-2017:1504
Vendor Advisory
https://access.redhat.com/errata/RHSA-2017:1537
Vendor Advisory
https://access.redhat.com/errata/RHSA-2017:1546
Mitigation
https://access.redhat.com/solutions/3022771
More from Openstack
9.9
CVE-2016-9603
A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update…
9.9
CVE-2017-2620
Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue
9.8
CVE-2015-5741
The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP request smuggling attacks via a…
9.8
CVE-2013-2167
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass
9.8
CVE-2013-2166
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass