CVE-2014-3703

OpenStack PackStack 2012.2.1, cuando el plugin monolítico Open vSwitch (OVS) no está utilizado, no establece correctamente la opción de la configuración libvirt_vif_driver cuando genera la configuración nova.conf, lo que causa que se deshabilita el firewall y permite a atacantes remotos evadir las restricciones de acceso.

It was discovered that the nova.conf configuration generated by PackStack did not correctly set the libvirt_vif_driver configuration option if the Open vSwitch (OVS) monolithic plug-in was not used. This could result in deployments defaulting to having the firewall disabled unless the nova configuration was manually modified after PackStack was started.

PackStack is a command-line utility that uses Puppet modules to support rapid deployment of OpenStack on existing servers over an SSH connection. PackStack is suitable for deploying both single node proof-of-concept installations and more complex multi-node installations. It was discovered that the nova.conf configuration generated by PackStack did not correctly set the libvirt_vif_driver configuration option if the Open vSwitch monolithic plug-in was not used. This could result in deployments defaulting to having the firewall disabled unless the nova configuration was manually modified after PackStack was started.