openstack team mailing list archive

Thread
Date

[OSSN] [OSSG] Nova Baremetal Exposes Previous Tenant Data

To: "openstack@xxxxxxxxxxxxxxxxxxx" <openstack@xxxxxxxxxxxxxxxxxxx>
From: "Clark, Robert Graham" <robert.clark@xxxxxx>
Date: Wed, 3 Jul 2013 09:15:54 +0000
Accept-language: en-US
Thread-index: AQHOd83rqeGygFP4XkyFqcMVWkLFJA==
Thread-topic: [OSSN] [OSSG] Nova Baremetal Exposes Previous Tenant Data
User-agent: Microsoft-MacOutlook/14.3.4.130416

Nova Baremetal Exposes Previous Tenant Data
-----

### Summary ###
Data of previous tenants may be exposed to new ones when using Nova Baremetal

### Affected Services / Software ###
Keystone, Databases

### Discussion ###
Nova Baremetal is intended for testing and development only, it is not intended to be production ready. Experience has shown that despite that warning the OpenStack community is keen to embrace new technologies and deploy at-risk. This OSSN serves to signpost some of the risks.

Without secure boot, and without full openflow hardware networking during the boot process, it is impossible to trust multiple tenants on baremetal at all - because the vectors for attack are so low level that instances may be running in a virtual environment and unaware of it, with the virtual environment capturing secrets, forcing entropy pools to be predictable and other such hostile behaviour.

### Recommended Actions ###
Do not use Nova Baremetal where secure separation of tenants on hardware is a requirement without a full verifiable boot chain and network hardware.

### Contacts / References ###
This OSSN : https://bugs.launchpad.net/ossn/+bug/1174153
OpenStack Security ML : openstack-security@xxxxxxxxxxxxxxxxxxx
OpenStack Security Group : https://launchpad.net/~openstack-ossg
CVE: CVE-2013-2235