CVE-2017-16239

mediumPriorität · verfolgen · 26EPSS 0.014 · 73. PerzentilEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.42% (73rd) EPSS

CVSS 4 · medium

Is it mine?

16 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · osv · nvd

EPSS · bewertet 2026-10-27

In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova Filter Scheduler are affected. Because of the regression described in Launchpad Bug #1732947, the preferred fix is a 14.x version after 14.0.10, a 15.x version after 15.0.8, or a 16.x version after 16.0.3.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.04mediumAV:N/AC:L/Au:S/C:N/I:P/A:Nprimary · NVD / NIST USAusnutzbarkeit 8 · Auswirkung 2.9

v3.06.5mediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:Nprimary · NVD / NIST USAusnutzbarkeit 2.8 · Auswirkung 3.6

v3.06.5mediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:Nsecondary · OSV

v3.06mediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-285USLLM-abgeleitet

betroffene Produkte (16)

Betroffene Produkte und Versionsbereiche.

n/a n/a≤ n/aenisa_euvdEU
openstack nova≤ 14.0.9nvdUScpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*
openstack nova= 15.0.0nvdUScpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*
openstack nova= 15.0.1nvdUScpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*
openstack nova= 15.0.2nvdUScpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*
openstack nova= 15.0.3nvdUScpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*
openstack nova= 15.0.4nvdUScpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*
openstack nova= 15.0.5nvdUScpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*
openstack nova= 15.0.6nvdUScpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*
openstack nova= 15.0.7nvdUScpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*
openstack nova= 16.0.0nvdUScpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*
openstack nova= 16.0.1nvdUScpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*
openstack nova= 16.0.2nvdUScpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*
PyPI nova14.0.0 → 14.0.10osvUSpkg:pypi/nova
PyPI nova15.0.0 → 15.0.8osvUSpkg:pypi/nova
PyPI nova16.0.0 → 16.0.3osvUSpkg:pypi/nova

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

GHSA-w2wf-cgwh-vpqgOpenStack Nova Filter Scheduler Bypass2022-05-13ghsa · osvUS
In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova Filter Scheduler are affected. Because of the regression described in Launchpad Bug #1732947, the preferred fix is a 14.x version after 14.0.10, a 15.x version after 15.0.8, or a 16.x version after 16.0.3.
PYSEC-2026-694OpenStack Nova Filter Scheduler Bypass2026-07-02vendor · osvUS
In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova Filter Scheduler are affected. Because of the regression described in Launchpad Bug #1732947, the preferred fix is a 14.x version after 14.0.10, a 15.x version after 15.0.8, or a 16.x version after 16.0.3.

auch bekannt als (6)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd osv nvd NVD CVE.org MITRE

veröffentlicht 2017-11-14geändert 2026-06-17

Referenzen (21)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan