https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 04:01:02 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-38311 cnvd-2017-38311 https://cve.radiocsirt.org/vuln/cnvd-2017-38311 https://cve.radiocsirt.org/vuln/euvd-2026-78462 EUVD-2026-78462 https://cve.radiocsirt.org/vuln/euvd-2026-78462 https://cve.radiocsirt.org/vuln/fkie_cve-2017-15114 <p>When libvirtd is configured by OSP director (tripleo-heat-templates) to use the TLS transport it defaults to the same certificate authority as all non-libvirtd services. As no additional authentication is configured this allows these services to connect to libvirtd (which is equivalent to root access). If a vulnerability exists in another service it could, combined with this flaw, be exploited to escalate privileges to gain control over compute nodes.</p> <p>When libvirtd is configured by OSP director (tripleo-heat-templates) to use the TLS transport it defaults to the same certificate authority as all non-libvirtd services. As no additional authentication is configured this allows these services to connect to libvirtd (which is equivalent to root access). If a vulnerability exists in another service it could, combined with this flaw, be exploited to escalate privileges to gain control over compute nodes.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-15114 https://cve.radiocsirt.org/vuln/ghsa-5h4f-9xqg-f36m <p>When libvirtd is configured by OSP director (tripleo-heat-templates) to use the TLS transport it defaults to the same certificate authority as all non-libvirtd services. As no additional authentication is configured this allows these services to connect to libvirtd (which is equivalent to root access). If a vulnerability exists in another service it could, combined with this flaw, be exploited to escalate privileges to gain control over compute nodes.</p> <p>When libvirtd is configured by OSP director (tripleo-heat-templates) to use the TLS transport it defaults to the same certificate authority as all non-libvirtd services. As no additional authentication is configured this allows these services to connect to libvirtd (which is equivalent to root access). If a vulnerability exists in another service it could, combined with this flaw, be exploited to escalate privileges to gain control over compute nodes.</p> https://cve.radiocsirt.org/vuln/ghsa-5h4f-9xqg-f36m https://cve.radiocsirt.org/vuln/gsd-2017-15114 gsd-2017-15114 https://cve.radiocsirt.org/vuln/gsd-2017-15114 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-15114 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: tripleo-heat-templates, Ubuntu:18.04:LTS: tripleo-heat-templates</p> <p>When libvirtd is configured by OSP director (tripleo-heat-templates) to use the TLS transport it defaults to the same certificate authority as all non-libvirtd services. As no additional authentication is configured this allows these services to connect to libvirtd (which is equivalent to root access). If a vulnerability exists in another service it could, combined with this flaw, be exploited to escalate privileges to gain control over compute nodes.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: tripleo-heat-templates, Ubuntu:18.04:LTS: tripleo-heat-templates</p> <p>When libvirtd is configured by OSP director (tripleo-heat-templates) to use the TLS transport it defaults to the same certificate authority as all non-libvirtd services. As no additional authentication is configured this allows these services to connect to libvirtd (which is equivalent to root access). If a vulnerability exists in another service it could, combined with this flaw, be exploited to escalate privileges to gain control over compute nodes.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-15114