CVE-2014-3703

OpenStack PackStack 2012.2.1 - Firewall Bypass via libvirt_vif_driver Misconfiguration

Title source: llm
STIX 2.1

Description

OpenStack PackStack 2012.2.1, when the Open vSwitch (OVS) monolithic plug-in is not used, does not properly set the libvirt_vif_driver configuration option when generating the nova.conf configuration, which causes the firewall to be disabled and allows remote attackers to bypass intended access restrictions.

References (1)

Core 1
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-1691.html

Scores

EPSS 0.0216
EPSS Percentile 80.3%

Details

CWE
CWE-264
Status published
Products (1)
redhat/packstack 2012.2.1
Published Dec 02, 2014
Tracked Since Feb 18, 2026