← Back to branch summary

~ubuntu-security/ubuntu-cve-tracker/master

« back to all changes in this revision

Viewing changes to active/CVE-2017-16239

  • Committer: Steve Beattie
  • Date: 2019-02-19 06:18:27 UTC
  • Revision ID: sbeattie@ubuntu.com-20190219061827-oh57fzcfc1u9dlfk
The ubuntu-cve-tracker project has been converted to git.

Please use 'git clone https://git.launchpad.net/ubuntu-cve-tracker' to
get the converted tree.

Show diffs side-by-side

added added

removed removed

Lines of Context:
active/CVE-2017-16239
1
 
Candidate: CVE-2017-16239
2
 
CRD: 2017-11-14 15:00:00 UTC
3
 
PublicDate: 2017-11-14
4
 
References: 
5
 
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16239
6
 
 https://security.openstack.org/ossa/OSSA-2017-005.html
7
 
Description:
8
 
 In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through
9
 
 16.0.2, by rebuilding an instance, an authenticated user may be able to
10
 
 circumvent the Filter Scheduler bypassing imposed filters (for example, the
11
 
 ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova
12
 
 Filter Scheduler are affected. Because of the regression described in
13
 
 Launchpad Bug #1732947, the preferred fix is a 14.x version after 14.0.10,
14
 
 a 15.x version after 15.0.8, or a 16.x version after 16.0.3.
15
 
Ubuntu-Description: 
16
 
Notes: 
17
 
 mdeslaur> regression fix: http://www.openwall.com/lists/oss-security/2017/12/05/4
18
 
Bugs: 
19
 
 https://launchpad.net/bugs/1664931
20
 
Priority: medium
21
 
Discovered-by: George Shuklin
22
 
Assigned-to: 
23
 
 
24
 
Patches_nova:
25
 
upstream_nova: needs-triage
26
 
precise/esm_nova: DNE
27
 
trusty_nova: not-affected (code not present)
28
 
xenial_nova: needed
29
 
zesty_nova: ignored (reached end-of-life)
30
 
artful_nova: not-affected (16.0.3-0ubuntu1)
31
 
bionic_nova: not-affected (2:17.0.0~rc2-0ubuntu1)
32
 
devel_nova: not-affected (2:17.0.0~rc2-0ubuntu1)