{"id":"CVE-2020-10731","aliases":["EUVD-2020-3156","GHSA-9m56-29jp-mr7j","RHSA-2020:3199","RHSA-2020:3406","RHSA-2020:3410"],"status":"published","title":"A flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16,...","description":"A flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16, where it does not have SELinux enabled. This flaw causes sVirt, an important isolation mechanism, to be disabled for all running virtual machines.","severity":{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00889,"percentile":0.59783,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-284"],"published":"2020-07-31T12:38:45Z","modified":"2026-06-27T10:10:59Z","fixes":[{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-tripleo-heat-templates","fixed_in":["0:11.3.2-0.20200616081532.396affd.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16::el8","package":"openstack-tripleo-heat-templates","fixed_in":["0:11.3.2-0.20200405044628.ec9970c.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16::el8","package":"paunch-services","fixed_in":["0:5.3.2-0.20200320172310.ebc49c4.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16::el8","package":"python-paunch","fixed_in":["0:5.3.2-0.20200320172310.ebc49c4.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16::el8","package":"python3-paunch","fixed_in":["0:5.3.2-0.20200320172310.ebc49c4.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:15::el8","package":"openstack-tripleo-heat-templates","fixed_in":["0:10.6.3-0.20200113185561.cf467ea.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:15::el8","package":"paunch-services","fixed_in":["0:4.5.3-0.20200108190460.3c38fe6.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:15::el8","package":"python-paunch","fixed_in":["0:4.5.3-0.20200108190460.3c38fe6.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:15::el8","package":"python3-paunch","fixed_in":["0:4.5.3-0.20200108190460.3c38fe6.el8ost"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-tripleo-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.2-0.20200616081532.396affd.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16::el8","package":"openstack-tripleo-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.2-0.20200405044628.ec9970c.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16::el8","package":"paunch-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-0.20200320172310.ebc49c4.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16::el8","package":"python-paunch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-0.20200320172310.ebc49c4.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16::el8","package":"python3-paunch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-0.20200320172310.ebc49c4.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:15::el8","package":"openstack-tripleo-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6.3-0.20200113185561.cf467ea.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:15::el8","package":"paunch-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.3-0.20200108190460.3c38fe6.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:15::el8","package":"python-paunch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.3-0.20200108190460.3c38fe6.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:15::el8","package":"python3-paunch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.3-0.20200108190460.3c38fe6.el8ost"}]}]}],"products":[{"vendor":"redhat","product":"openstack_platform"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1831544","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10731","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-9m56-29jp-mr7j"},{"url":"https://access.redhat.com/errata/RHSA-2020:3199","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3199.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10731","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10731","tags":["advisory"]},{"url":"https://bugs.launchpad.net/tripleo/+bug/1880947","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3406","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3406.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3410","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3410.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-10731","description":"A flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16, where it does not have SELinux enabled. This flaw causes sVirt, an important isolation mechanism, to be disabled for all running virtual machines.","status":"published","published":"2020-07-31T12:38:45Z","modified":"2024-08-04T11:14:14.177Z","cwes":["CWE-284"],"updated_at":"2026-11-02T14:35:48.213211Z"}],"euvd":[{"id":"EUVD-2020-3156","description":"A flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16, where it does not have SELinux enabled. This flaw causes sVirt, an important isolation mechanism, to be disabled for all running virtual machines.","status":"published","published":"2020-07-31T12:38:45Z","modified":"2024-08-04T11:14:14Z","updated_at":"2026-11-03T03:07:49.454544Z"}],"ghsa":[{"id":"GHSA-9m56-29jp-mr7j","title":"A flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16,...","description":"A flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16, where it does not have SELinux enabled. This flaw causes sVirt, an important isolation mechanism, to be disabled for all running virtual machines.","status":"published","published":"2022-05-24T17:24:46Z","modified":"2024-04-04T02:55:28Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:56:13.24073Z"}],"nvd":[{"id":"CVE-2020-10731","description":"A flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16, where it does not have SELinux enabled. This flaw causes sVirt, an important isolation mechanism, to be disabled for all running virtual machines.","status":"published","published":"2020-07-31T13:15:12.383Z","modified":"2026-06-17T02:48:20.367Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:06:10.994748Z"}],"osv":[{"id":"RHSA-2020:3199","title":"Red Hat Security Advisory: openstack-tripleo-heat-templates security update","status":"published","published":"2024-09-16T04:36:59Z","modified":"2026-06-27T10:10:45Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:3406","title":"Red Hat Security Advisory: python-paunch and openstack-tripleo-heat-templates security update","status":"published","published":"2024-09-16T04:37:14Z","modified":"2026-06-27T10:10:59Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:3410","title":"Red Hat Security Advisory: python-paunch and openstack-tripleo-heat-templates security update","status":"published","published":"2024-09-16T04:37:06Z","modified":"2026-06-27T10:10:59Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:07.072948Z"}]}}