CVEvulnerability

CVE-2017-16239

6.5 MEDIUM Published 2017-11-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-11-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N

Description

In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova Filter Scheduler are affected. Because of the regression described in Launchpad Bug #1732947, the preferred fix is a 14.x version after 14.0.10, a 15.x version after 15.0.8, or a 16.x version after 16.0.3.

Affected configurations

• openstack nova (<= 14.0.9) • openstack nova 15.0.0 • openstack nova 15.0.1 • openstack nova 15.0.2 • openstack nova 15.0.3 • openstack nova 15.0.4 • openstack nova 15.0.5 • openstack nova 15.0.6 • openstack nova 15.0.7 • openstack nova 16.0.0 • openstack nova 16.0.1 • openstack nova 16.0.2

References