PyPI/nova CVE-2017-7214: critical 9.8, EPSS 2.30%
OpenStack Nova logs sensitive context from notification exceptions
Action: Upgrade nova to 13.1.4 or later.
pip install nova==13.1.4pip install nova==14.0.5pip install nova==15.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 13.0.0 | 13.1.4 | - |
| 14.0.0 | 14.0.5 | - |
| 15.0.1 | 15.0.2 | - |
Fixed versions
| 13.1.4 | 14.0.5 | 15.0.2 |
Sources
- osv: PYSEC-2026-432
- https://nvd.nist.gov/vuln/detail/CVE-2017-7214
- https://github.com/openstack/nova/commit/3f985f1eda6f29180878a3d21c20c5057179486a
- https://github.com/openstack/nova/commit/acb19160d4d348e29a21ad57c61c7369352c4d1c
- https://github.com/openstack/nova/commit/c2c91ce44592fc5dc2aacee1cf7f5b5cfd2e9a0a
- https://github.com/openstack/nova/commit/e193201fa1de5b08b29adefd8c149935c5529598
- https://access.redhat.com/errata/RHSA-2017:1508
- https://access.redhat.com/errata/RHSA-2017:1595
- https://github.com/openstack/nova
- https://launchpad.net/bugs/1673569
- http://www.securityfocus.com/bid/96998
- https://pypi.org/project/nova
- https://github.com/advisories/GHSA-f4g4-cj8f-3cr9
CVE-2017-7214 · published · modified · JSON