Описание
An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was introduced with the fix for OSSA-2017-005 (CVE-2017-16239); however, only Nova stable/pike or later deployments with that fix applied and relying on the default FilterScheduler are affected.
Отчет
This vulnerability was caused by the fix for a prior vulnerability (CVE-2017-16239). No patches for the earlier vulnerability were released for Red Hat OpenStack before the discover of the new vulnerability. Therefore, current versions of Red Hat OpenStack are not affected by this vulnerability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux OpenStack Platform 6 (Juno) | openstack-nova | Not affected | ||
| Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) | openstack-nova | Not affected | ||
| Red Hat OpenStack Platform 10 (Newton) | openstack-nova | Not affected | ||
| Red Hat OpenStack Platform 11 (Ocata) | openstack-nova | Not affected | ||
| Red Hat OpenStack Platform 12 (Pike) | openstack-nova | Not affected | ||
| Red Hat OpenStack Platform 8 (Liberty) | openstack-nova | Not affected | ||
| Red Hat OpenStack Platform 9 (Mitaka) | openstack-nova | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
5.3 Medium
CVSS3
Связанные уязвимости
An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was introduced with the fix for OSSA-2017-005 (CVE-2017-16239); however, only Nova stable/pike or later deployments with that fix applied and relying on the default FilterScheduler are affected.
An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was introduced with the fix for OSSA-2017-005 (CVE-2017-16239); however, only Nova stable/pike or later deployments with that fix applied and relying on the default FilterScheduler are affected.
An issue was discovered in the default FilterScheduler in OpenStack No ...
OpenStack Nova DoS by rebuilding the same instance with a new image multiple times
EPSS
5.3 Medium
CVSS3