7.8

CVE-2017-18191

Exploit
An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an encrypted volume, an attacker may access the underlying raw volume and corrupt the LUKS header, resulting in a denial of service attack on the compute host. (The same code error also results in data loss, but that is not a vulnerability because the user loses their own data.) All Nova setups supporting encrypted volumes are affected.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Openstack ≫ Nova Version >= 15.0.0 <= 15.1.0
Openstack ≫ Nova Version >= 16.0.0 <= 16.1.1
Redhat ≫ Openstack Version9
Redhat ≫ Openstack Version10
Redhat ≫ Openstack Version12
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.76% 0.885
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://openwall.com/lists/oss-security/2018/04/20/3
Patch
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/103104
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:2332
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2714
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2855
Third Party Advisory
https://launchpad.net/bugs/1739593
Third Party Advisory
Exploit
Issue Tracking
https://review.openstack.org/539893
Patch
Third Party Advisory
Exploit
https://security.openstack.org/ossa/OSSA-2018-001.html
Patch
Vendor Advisory