ID CVE-2020-10731
Summary A flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16, where it does not have SELinux enabled. This flaw causes sVirt, an important isolation mechanism, to be disabled for all running virtual machines.
References
Vulnerable Configurations
  • cpe:2.3:a:redhat:openstack_platform:15.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openstack_platform:15.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openstack_platform:16.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openstack_platform:16.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openstack_platform:16.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openstack_platform:16.1:*:*:*:*:*:*:*
CVSS
Base: 6.5 (as of 19-10-2021 - 13:00)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:S/C:P/I:P/A:P
redhat via4
rpms
  • openstack-tripleo-heat-templates-0:11.3.2-0.20200616081532.396affd.el8ost
  • openstack-tripleo-heat-templates-0:11.3.2-0.20200405044628.ec9970c.el8ost
  • paunch-services-0:5.3.2-0.20200320172310.ebc49c4.el8ost
  • python3-paunch-0:5.3.2-0.20200320172310.ebc49c4.el8ost
  • openstack-tripleo-heat-templates-0:10.6.3-0.20200113185561.cf467ea.el8ost
  • paunch-services-0:4.5.3-0.20200108190460.3c38fe6.el8ost
  • python3-paunch-0:4.5.3-0.20200108190460.3c38fe6.el8ost
refmap via4
misc https://bugzilla.redhat.com/show_bug.cgi?id=1831544
Last major update 19-10-2021 - 13:00
Published 31-07-2020 - 13:15
Last modified 19-10-2021 - 13:00
Back to Top