Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 534
Alerts This Week
Warning Icon 1 534

Ubuntu 19.04: 4153-1 Moderate: Octavia Unintended Network Access

ubuntu
Calendar Grey October 10, 2019
Dist Ubuntu Esm H88
Newly discovered flaw in Octavia exposes network services on Ubuntu 19.04, posing security risks. Users advised to apply updates promptly.
Octavia could allow unintended access to network services.

Summary

Octavia could allow unintended access to network services.

Software Description:

- octavia: OpenStack Load Balancer Service

Details:

Daniel Preussker discovered that Octavia incorrectly handled client

certificate checking. A remote attacker on the management network could

possibly use this issue to perform configuration changes and obtain

sensitive information.

Topics%20covered

Topics Covered

security advisory remote access ubuntu network service confidentiality configuration change octavia

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  amphora-agent                   4.0.0-0ubuntu1.2
  octavia-common                  4.0.0-0ubuntu1.2
  python3-octavia                 4.0.0-0ubuntu1.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4153-1

CVE-2019-17134

Severity
important
Lowest
Low
Medium
High
Critical

October 10, 2019

Topics%20covered

Topics Covered

security advisory remote access ubuntu network service confidentiality configuration change octavia

Package Information

https://launchpad.net/ubuntu/+source/octavia/4.0.0-0ubuntu1.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.