UBUNTU-CVE-2017-16239

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2017-16239
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2017/UBUNTU-CVE-2017-16239.json
JSON Data
https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2017-16239
Related
Published
2017-11-14T15:00:00Z
Modified
2017-11-14T15:00:00Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova Filter Scheduler are affected. Because of the regression described in Launchpad Bug #1732947, the preferred fix is a 14.x version after 14.0.10, a 15.x version after 15.0.8, or a 16.x version after 16.0.3.

References

Affected packages

Ubuntu:Pro:16.04:LTS / nova

Package

Name
nova
Purl
pkg:deb/ubuntu/nova?arch=src?distro=esm-infra/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2:12.*

2:12.0.0-0ubuntu2

2:13.*

2:13.0.0~b1-0ubuntu1
2:13.0.0~b2-0ubuntu1
2:13.0.0~b3-0ubuntu1
2:13.0.0~rc1-0ubuntu1
2:13.0.0~rc3-0ubuntu1
2:13.0.0-0ubuntu1
2:13.0.0-0ubuntu2
2:13.0.0-0ubuntu5
2:13.1.0-0ubuntu1
2:13.1.1-0ubuntu1
2:13.1.1-0ubuntu1.1
2:13.1.2-0ubuntu2
2:13.1.3-0ubuntu1
2:13.1.3-0ubuntu2
2:13.1.4-0ubuntu1
2:13.1.4-0ubuntu2
2:13.1.4-0ubuntu3
2:13.1.4-0ubuntu4.1
2:13.1.4-0ubuntu4.2
2:13.1.4-0ubuntu4.3
2:13.1.4-0ubuntu4.4
2:13.1.4-0ubuntu4.5
2:13.1.4-0ubuntu4.5+esm1

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:18.04:LTS / nova

Package

Name
nova
Purl
pkg:deb/ubuntu/nova?arch=src?distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:17.0.0~rc2-0ubuntu1

Affected versions

2:16.*

2:16.0.1-0ubuntu1
2:16.0.1-0ubuntu2

2:17.*

2:17.0.0~b1-0ubuntu1
2:17.0.0~b2-0ubuntu2
2:17.0.0~b3-0ubuntu3
2:17.0.0~b3-0ubuntu4
2:17.0.0~rc1-0ubuntu1

Ecosystem specific 

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-ajax-console-proxy"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-api"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-api-metadata"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-api-os-compute"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-api-os-volume"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-cells"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-common"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-compute"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-compute-kvm"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-compute-libvirt"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-compute-lxc"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-compute-qemu"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-compute-vmware"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-compute-xen"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-conductor"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-console"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-consoleauth"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-doc"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-network"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-novncproxy"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-placement-api"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-scheduler"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-serialproxy"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-spiceproxy"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-volume"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "nova-xvpvncproxy"
        },
        {
            "binary_version": "2:17.0.0~rc2-0ubuntu1",
            "binary_name": "python-nova"
        }
    ]
}