Paper/Archive/CVE-2020-10731

CVE-2020-10731

redhat — A flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16, where it does not have SELinux enabled.

EPSS 0.9%CVSS 9.9

critical.is priorityof 100

CVSS 9.9 (NVD)9.9 / 10 × 3029.7 Not in CISA KEV+300.0 EPSS percentile 59.4.594 × 2011.9 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

A flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16, where it does not have SELinux enabled. This flaw causes sVirt, an important isolation mechanism, to be disabled for all running virtual machines.

Affected

ProductAffectedFixed inSource

nova_libvirt container provided by the Red Hat OpenStack Platform16–CNA

Scores by source

NVD9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References

refbugzilla.redhat.com/show_bug.cgi?id=1831544