CVE-2017-15114

When libvirtd is configured by OSP director (tripleo-heat-templates) to use the TLS transport it defaults to the same certificate authority as all non-libvirtd services. As no additional authentication is configured this allows these services to connect to libvirtd (which is equivalent to root access). If a vulnerability exists in another service it could, combined with this flaw, be exploited to escalate privileges to gain control over compute nodes.

• CWE-295

• http://www.securityfocus.com/bid/101971Third Party Advisory, VDB Entry
• https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=994922a8ba996fe68d047df0e1486fa805dbea31Patch, Vendor Advisory
• http://www.securityfocus.com/bid/101971Third Party Advisory, VDB Entry
• https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=994922a8ba996fe68d047df0e1486fa805dbea31Patch, Vendor Advisory

Published

Nov 27, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15108spice-vdagent up to and including 0.17.0 does not properly e…7.8
• CVE-2017-15109Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-15110In Moodle 3.x, students can find out email addresses of othe…
• CVE-2017-15111keycloak-httpd-client-install versions before 0.8 insecurely…
• CVE-2017-15112keycloak-httpd-client-install versions before 0.8 allow user…
• CVE-2017-15113ovirt-engine before version 4.1.7.6 with log level set to DE…7.2
• CVE-2017-15115The sctp_do_peeloff function in net/sctp/socket.c in the Lin…7.8
• CVE-2017-15116The rngapi_reset function in crypto/rng.c in the Linux kerne…
• CVE-2017-15117Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-15118A stack-based buffer overflow vulnerability was found in NBD…8.3
• CVE-2017-15119The Network Block Device (NBD) server in Quick Emulator (QEM…5.8
• CVE-2017-15120An issue has been found in the parsing of authoritative answ…7.5