Skip to content
OpenAdvisories
High USN-3195-1 1 CVE

nova-lxd vulnerability

Published Feb 10, 2017 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

James Page discovered that Nova-LXD incorrectly set up virtual network devices
when creating LXD instances. This could result in an unintended firewall
configuration.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS nova-lxd 13.2.0-0ubuntu1.16.04.1

Vulnerabilities 1

  • High 7.5
    CVE-2017-5936

    OpenStack Nova-LXD bypass security restrictions

    OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allows remote attackers to bypass intended security restrictions.

    nova-lxd nova-lxd Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2017-5936
  • report
    https://launchpad.net/bugs/1656847