CVE-2017-5936
OpenStack Nova-LXD bypass security restrictions
OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allows remote attackers to bypass intended security restrictions.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allows remote attackers to bypass intended security restrictions.
- Record
CVE-2017-5936- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allows remote attackers to bypass intended security restrictions.
- Record
CVE-2017-5936- Updated
- 2026-11-02
EUVDEUVD-2017-0078 No score
OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allows remote attackers to bypass intended security restrictions.
- Record
EUVD-2017-0078- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6xc7-4cx8-j3xc
OpenStack Nova-LXD bypass security restrictions
OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allows remote attackers to bypass intended security restrictions.
- Record
GHSA-6xc7-4cx8-j3xc- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N - CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSV
OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allows remote attackers to bypass intended security restrictions.
- Record
CVE-2017-5936- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVGHSA-6xc7-4cx8-j3xc
OpenStack Nova-LXD bypass security restrictions
OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allows remote attackers to bypass intended security restrictions.
- Record
GHSA-6xc7-4cx8-j3xc- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N - CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-5936
OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allows remote attackers to bypass intended security restrictions.
- Record
UBUNTU-CVE-2017-5936- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVPYSEC-2017-21 No score
OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allows remote attackers to bypass intended security restrictions.
- Record
PYSEC-2017-21- Updated
- 2026-11-02
OSVUSN-3195-1 No score
nova-lxd vulnerability
James Page discovered that Nova-LXD incorrectly set up virtual network devices when creating LXD instances. This could result in an unintended firewall configuration.
- Record
USN-3195-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nova-lxdPyPI |
before 13.1.1 | 13.1.1 |
nova-lxdPyPI |
before 13.1.1, plus listed versions 0.19.013.0.013.0.0.0b213.0.0.0b313.1.0 |
13.1.1 |
nova-lxdPyPI |
before 13.1.1, plus listed versions 0.19.013.0.013.0.0.0b213.0.0.0b313.1.013.2.013.113.0.1 |
13.1.1 |
nova-lxdUbuntu:16.04:LTS |
before 13.2.0-0ubuntu1.16.04.1, plus listed versions 0.18+git201512020918.146ccc8-0ubuntu10.19.0-0ubuntu113.0.0~b2-0ubuntu213.0.0~b3-0ubuntu113.0.0~b3-0ubuntu2 Show 5 moreShow less13.0.0-0ubuntu113.0.0-0ubuntu213.0.0-0ubuntu313.0.0-0ubuntu3.113.2.0-0ubuntu1 |
13.2.0-0ubuntu1.16.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-5936 is a high vulnerability (CVSS 7.5) in Openstack Nova-lxd, published February 8, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.93%, the 87th percentile. Fixed in nova-lxd 13.1.1.
References
securityfocus.com/bid/96182
bugs.launchpad.net/nova-lxd/+bug/1656847
ubuntu.com/usn/USN-3195-1
github.com/openstack/nova-lxd/commit/1b76cefb92081efa1e88cd8f330253f857028bd2
openwall.com/lists/oss-security/2017/02/09/3
nvd.nist.gov/vuln/detail/CVE-2017-5936
Show 8 moreShow less
web.archive.org/web/20200227193915/http://www.securityfocus.com/bid/96182
ubuntu.com/security/CVE-2017-5936
cve.org/CVERecord?id=CVE-2017-5936
launchpad.net/bugs/1656847