CVE-2014-0071: Medium severity redhat Openstack vulnerability
PackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to Neutron, which allows remote attackers to bypass intended access restrictions and make unauthorized connections.
Other sources
Yair Fried of Red Hat reports:
A regression from Grizzly and Havana exists in the PackStack rules deployed to Neutron. Specifically when default security groups are enabled they are not enforced, allowing connectivity to systems that should be blocked by the security groups.
External references: https://review.openstack.org/#/c/62702/
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In PackStack for Red Hat OpenStack 4.0, ensure Neutron default security groups are enforced when default security groups are enabled; the regression causes them to not be enforced and allows remote attackers to bypass intended access restrictions.
PackStack (Red Hat OpenStack 4.0) rules deployed to Neutron default security groups enforcement = enforced - Compensating control
Temporarily avoid relying on Neutron default security groups until PackStack’s enforcement regression is fixed; restrict network access so unintended connectivity (to systems that should be blocked by security groups) is not reachable by remote attackers.
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0071?
CVE-2014-0071 is classified as a medium severity vulnerability allowing unauthorized access due to improper enforcement of security groups.
How do I fix CVE-2014-0071?
To fix CVE-2014-0071, ensure that security groups are correctly configured and enforced in environments using Red Hat OpenStack 4.0.
What software versions are affected by CVE-2014-0071?
CVE-2014-0071 specifically affects Red Hat OpenStack version 4.0.
What types of attacks can occur due to CVE-2014-0071?
CVE-2014-0071 allows remote attackers to bypass security restrictions, potentially leading to unauthorized connections and data exposure.
Is there a workaround for CVE-2014-0071?
A workaround for CVE-2014-0071 involves manually adjusting security group configurations to enforce intended access controls.