CVE-2017-15114

Name	CVE-2017-15114
Description	When libvirtd is configured by OSP director (tripleo-heat-templates) to use the TLS transport it defaults to the same certificate authority as all non-libvirtd services. As no additional authentication is configured this allows these services to connect to libvirtd (which is equivalent to root access). If a vulnerability exists in another service it could, combined with this flaw, be exploited to escalate privileges to gain control over compute nodes.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
tripleo-heat-templates	source	(unstable)	(not affected)

Notes

- tripleo-heat-templates <not-affected> (Vulnerability introduced later)
https://bugzilla.redhat.com/show_bug.cgi?id=1510015
Bug: https://bugs.launchpad.net/tripleo/+bug/1730370
TLS libvirt live migration disabled in: https://review.openstack.org/#/c/519015/
TLS libvirt live migration introduced in: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=fa740c5e49994ffdd3a5aa1f43a0305c8e5a0b3a
Re-enabled libvirt TLS with SASL auth:
https://bugs.launchpad.net/tripleo/+bug/1732479