CVE-2020-17376: XEE
An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a soft reboot of an instance that has previously undergone live migration, a user may gain access to destination host devices that share the same paths as host devices previously referenced by the virtual machine on the source host. This can include block devices that map to different Cinder volumes at the destination than at the source. Only deployments allowing host-based connections (for instance, root and ephemeral devices) are affected.
Other sources
An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a soft reboot of an instance that has previously undergone live migration, a user may gain access to destination host devices that share the same paths as host devices previously referenced by the virtual machine on the source host. This can include block devices that map to different Cinder volumes at the destination than at the source. Only deployments allowing host-based connections (for instance, root and ephemeral devices) are affected.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-17376?
CVE-2020-17376 is a vulnerability in OpenStack Nova that allows a user to gain access to destination host devices by performing a soft reboot of an instance that has previously undergone live migration.
What is the severity of CVE-2020-17376?
The severity of CVE-2020-17376 is high, with a CVSS score of 8.3.
How does CVE-2020-17376 affect OpenStack Nova?
CVE-2020-17376 affects OpenStack Nova versions before 19.3.1, 20.x before 20.3.1, and 21.0.0.
How can I fix CVE-2020-17376?
To fix CVE-2020-17376, update OpenStack Nova to version 19.3.1, 20.3.1, or later.
Where can I find more information about CVE-2020-17376?
You can find more information about CVE-2020-17376 at the following references: - http://www.openwall.com/lists/oss-security/2020/08/25/4 - https://launchpad.net/bugs/1890501 - https://security.openstack.org/ossa/OSSA-2020-006.html