PyPI/nova CVE-2017-16239: medium 6.5, EPSS 1.42%
OpenStack Nova Filter Scheduler Bypass
Action: Upgrade nova to 14.0.10 or later.
pip install nova==16.0.3pip install nova==15.0.8pip install nova==14.0.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 16.0.0 | 16.0.3 | - |
| 15.0.0 | 15.0.8 | - |
| 14.0.0 | 14.0.10 | - |
Fixed versions
| 16.0.3 | 15.0.8 | 14.0.10 |
Sources
- osv: GHSA-w2wf-cgwh-vpqg
- https://nvd.nist.gov/vuln/detail/CVE-2017-16239
- https://github.com/openstack/nova/commit/698b261a5a2a6c0f31ef5059046ef7196d5cba30
- https://github.com/openstack/nova/commit/984dd8ad6add4523d93c7ce5a666a32233e02e34
- https://github.com/openstack/nova/commit/9e2d63da94db63d97bd02e373bfc53d95808b833
- https://github.com/openstack/nova/commit/b72105c1c49fcddc94992af63fc2f8078023491a
- https://access.redhat.com/errata/RHSA-2018:0241
- https://access.redhat.com/errata/RHSA-2018:0314
- https://access.redhat.com/errata/RHSA-2018:0369
- https://github.com/openstack/nova
- https://launchpad.net/bugs/1664931
- https://security.openstack.org/ossa/OSSA-2017-005.html
- https://www.debian.org/security/2017/dsa-4056
- http://www.securityfocus.com/bid/101950
CVE-2017-16239 · published · modified · JSON