6.5

CVE-2017-16239

In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova Filter Scheduler are affected. Because of the regression described in Launchpad Bug #1732947, the preferred fix is a 14.x version after 14.0.10, a 15.x version after 15.0.8, or a 16.x version after 16.0.3.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Openstack ≫ Nova Version <= 14.0.9
Openstack ≫ Nova Version15.0.0
Openstack ≫ Nova Version15.0.1
Openstack ≫ Nova Version15.0.2
Openstack ≫ Nova Version15.0.3
Openstack ≫ Nova Version15.0.4
Openstack ≫ Nova Version15.0.5
Openstack ≫ Nova Version15.0.6
Openstack ≫ Nova Version15.0.7
Openstack ≫ Nova Version16.0.0
Openstack ≫ Nova Version16.0.1
Openstack ≫ Nova Version16.0.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.39% 0.589
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:P/A:N
http://www.securityfocus.com/bid/101950
Third Party Advisory
VDB Entry