CVE-2020-10731 Misconfiguration in nova libvirt container provided by the Red Hat OpenStack Platform
The nova_libvirt container lacks SELinux, disabling sVirt isolation for virtual machines and allowing potential security bypasses.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-10731?
CVE-2020-10731 is a critical vulnerability in nova_libvirt container provided by the Red Hat OpenStack Platform, published on 31 Jul 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16, where it does not have SELinux enabled. This flaw causes sVirt, an important isolation mechanism, to be disabled for all running virtual machines.
Weakness: CWE-284
Which versions are affected by CVE-2020-10731?
It affects 1 product.
Linux distribution packages (9)
openstack-tripleo-heat-templates Red Hat:openstack:15::el8 | All versions | 0:10.6.3-0.20200113185561.cf467ea.el8ost |
paunch-services Red Hat:openstack:15::el8 | All versions | 0:4.5.3-0.20200108190460.3c38fe6.el8ost |
python-paunch Red Hat:openstack:15::el8 | All versions | 0:4.5.3-0.20200108190460.3c38fe6.el8ost |
python3-paunch Red Hat:openstack:15::el8 | All versions | 0:4.5.3-0.20200108190460.3c38fe6.el8ost |
openstack-tripleo-heat-templates Red Hat:openstack:16.1::el8 | All versions | 0:11.3.2-0.20200616081532.396affd.el8ost |
openstack-tripleo-heat-templates Red Hat:openstack:16::el8 | All versions | 0:11.3.2-0.20200405044628.ec9970c.el8ost |
paunch-services Red Hat:openstack:16::el8 | All versions | 0:5.3.2-0.20200320172310.ebc49c4.el8ost |
python-paunch Red Hat:openstack:16::el8 | All versions | 0:5.3.2-0.20200320172310.ebc49c4.el8ost |
python3-paunch Red Hat:openstack:16::el8 | All versions | 0:5.3.2-0.20200320172310.ebc49c4.el8ost |
Products include Redhat Openstack Platform.
How do I fix CVE-2020-10731?
Apply the vendor's patch.
Is CVE-2020-10731 being exploited?
There is no known exploitation of CVE-2020-10731 in the wild and no public exploit code.
Other vulnerabilities in nova_libvirt container provided by the Red Hat OpenStack Platform
- CVE-2024-8007 Openstack-tripleo-common: rhosp director disables tls verification for registry mirrors
- CVE-2017-15114 Missing authorization in n/a
- CVE-2022-3596 Instack-undercloud: rsync leaks information to undercloud
- CVE-2023-6725 Tripleo-ansible: bind keys are world readable
- CVE-2022-3261 Plain-text passwords saved in /var/log/messages
Sources
Also known as GHSA-9m56-29jp-mr7j, RHSA-2020:3199, RHSA-2020:3406, RHSA-2020:3410.