Description
OpenStack PackStack 2012.2.1, when the Open vSwitch (OVS) monolithic plug-in is not used, does not properly set the libvirt_vif_driver configuration option when generating the nova.conf configuration, which causes the firewall to be disabled and allows remote attackers to bypass intended access restrictions.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenStack 4 | openstack-packstack +2 | 2013.2.1-0.33.dev1048.el6ost | RHSA-2014:1691 |
Advisories 1
- RHSA-2014:1691 Red Hat Security Advisory: openstack-packstack security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 1, 2026
References
- RHSA-2014:1691 vendor-advisory