PyPI/nova CVE-2017-18191: high 7.5, EPSS 3.72%
OpenStack Nova Denial of service attack on the compute host
Action: Upgrade nova to 15.1.1 or later.
pip install nova==15.1.1pip install nova==16.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 15.0.0 | 15.1.1 | - |
| 16.0.0 | 16.1.2 | - |
Fixed versions
| 15.1.1 | 16.1.2 |
Sources
- osv: PYSEC-2026-689
- https://nvd.nist.gov/vuln/detail/CVE-2017-18191
- https://github.com/openstack/nova/commit/0225a61fc4557c1257383a654f0741f7ef2ddeac
- https://github.com/openstack/nova/commit/5b64a1936122eeb35f37a09f9d38159e1a224c58
- https://github.com/openstack/nova/commit/cd3eb60c2c00bcccfa9ccd4bf9d1a96ae7a5cd88
- https://access.redhat.com/errata/RHSA-2018:2332
- https://access.redhat.com/errata/RHSA-2018:2714
- https://access.redhat.com/errata/RHSA-2018:2855
- https://github.com/openstack/nova
- https://launchpad.net/bugs/1739593
- https://review.openstack.org/539893
- https://security.openstack.org/ossa/OSSA-2018-001.html
- http://openwall.com/lists/oss-security/2018/04/20/3
- http://www.securityfocus.com/bid/103104
- https://pypi.org/project/nova
- https://github.com/advisories/GHSA-ffmh-r67w-m88f
CVE-2017-18191 · published · modified · JSON