CVE-2017-16239

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-16239
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-16239.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-16239
Aliases
Related
Published
2017-11-14T17:29:00Z
Modified
2024-10-11T11:26:31Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova Filter Scheduler are affected. Because of the regression described in Launchpad Bug #1732947, the preferred fix is a 14.x version after 14.0.10, a 15.x version after 15.0.8, or a 16.x version after 16.0.3.

References

Affected packages

Debian:11 / nova

Package

Name
nova
Purl
pkg:deb/debian/nova?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:16.0.3-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / nova

Package

Name
nova
Purl
pkg:deb/debian/nova?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:16.0.3-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / nova

Package

Name
nova
Purl
pkg:deb/debian/nova?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:16.0.3-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/openstack/nova

Affected ranges

Type
GIT
Repo
https://github.com/openstack/nova
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
506465a027dd1ba1c90949dc58297edae32da7e4
Last affected
6c67eee6f4a40c5e84beb2950c45e9fe5dcf9fd1
Last affected
6d4f9f4f6cfd3e256c68addfed0c3a033b3bf957
Last affected
7ccf8d2e358623b3536c9f3e2850a75414969134
Last affected
8b162ba21f06272f915070473640d493dd70beec
Last affected
8b2f7d38ccdbbc6533930b8d4eeff4e2ff79176c
Last affected
acb19160d4d348e29a21ad57c61c7369352c4d1c
Last affected
ca03fe87371d8c13fc2895f8ff3e7e1ca88cfe79
Last affected
cb3abbdb768013e4d7182a91c8a2b26c6d725f35
Last affected
edd59ae12d11db770cf7e1b0c306be34aacd3d2b
Last affected
fe329029265e10296a550fc9153b7977da4aefe2
Last affected
ff369899749ac3e21ed0174b40e948c78c2dc1fa