6.5

CVE-2017-16239

In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova Filter Scheduler are affected. Because of the regression described in Launchpad Bug #1732947, the preferred fix is a 14.x version after 14.0.10, a 15.x version after 15.0.8, or a 16.x version after 16.0.3.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Openstack ≫ Nova Version <= 14.0.9
Openstack ≫ Nova Version 15.0.0
Openstack ≫ Nova Version 15.0.1
Openstack ≫ Nova Version 15.0.2
Openstack ≫ Nova Version 15.0.3
Openstack ≫ Nova Version 15.0.4
Openstack ≫ Nova Version 15.0.5
Openstack ≫ Nova Version 15.0.6
Openstack ≫ Nova Version 15.0.7
Openstack ≫ Nova Version 16.0.0
Openstack ≫ Nova Version 16.0.1
Openstack ≫ Nova Version 16.0.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.41% 0.691
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/bid/101950
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:0241
https://access.redhat.com/errata/RHSA-2018:0314
https://access.redhat.com/errata/RHSA-2018:0369
https://launchpad.net/bugs/1664931
Issue Tracking
https://security.openstack.org/ossa/OSSA-2017-005.html
Vendor Advisory
https://www.debian.org/security/2017/dsa-4056