GHSA-v725-c588-h936
Suggest an improvement- Source
- https://github.com/advisories/GHSA-v725-c588-h936
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/08/GHSA-v725-c588-h936/GHSA-v725-c588-h936.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-v725-c588-h936
- Aliases
- Published
- 2022-08-04T00:00:26Z
- Modified
- 2024-05-14T21:57:09.083370Z
- Severity
-
- 3.3 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
- Summary
- OpenStack Nova Changing vnic_type breaks compute service restart
- Details
-
An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnictype, creating an instance bound to that port, and then changing the vnictype of the bound port to macvtap, an authenticated user may cause the compute service to fail to restart, resulting in a possible denial of service. Only Nova deployments configured with SR-IOV are affected.
- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2022-37394
- https://github.com/openstack/nova/commit/0c87681135cfb3ce61d2a0392928c1dbc1fe5fde
- https://github.com/openstack/nova/commit/1a98a1a650d065a8ab3e1c474f3b9fd537dc2206
- https://github.com/openstack/nova/commit/4954f993680c75fd9d3d507f2dcd00300c9b3d44
- https://github.com/openstack/nova/commit/a28c82719545d5c8ee7f3ff1361b3a796e05095a
- https://github.com/openstack/nova/commit/e43bf900dc8ca66578603bed333c56b215b1876e
- https://github.com/openstack/nova/commit/f8c91eb75fc5504a37fc3b4be1d65d33dbc9b511
- https://bugs.launchpad.net/ossa/+bug/1981813
- https://github.com/openstack/nova
- https://review.opendev.org/c/openstack/nova/+/849985
- https://review.opendev.org/c/openstack/nova/+/850003
Affected packages
PyPI / nova
Package
- Name
- nova
- View open source insights on deps.dev
- Purl
- pkg:pypi/nova
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed23.2.2
Affected versions
15.*
15.1.5
16.*
16.1.6
16.1.7
16.1.8
17.*
17.0.7
17.0.8
17.0.9
17.0.10
17.0.11
17.0.12
17.0.13
18.*
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.*
19.0.0.0rc1
19.0.0.0rc2
19.0.0
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.*
20.0.0.0rc1
20.0.0.0rc2
20.0.0
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.*
21.0.0.0rc1
21.0.0.0rc2
21.0.0
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.*
22.0.0.0rc1
22.0.0
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.*
23.0.0.0rc1
23.0.0.0rc2
23.0.0
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
PyPI / nova
Package
- Name
- nova
- View open source insights on deps.dev
- Purl
- pkg:pypi/nova
PyPI / nova
Package
- Name
- nova
- View open source insights on deps.dev
- Purl
- pkg:pypi/nova