CVE-2017-17051
mediumPriorität · verfolgen · 35EPSS 0.020 · 81. PerzentilEUUSEPSS · bewertet 2026-10-27
An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was introduced with the fix for OSSA-2017-005 (CVE-2017-16239); however, only Nova stable/pike or later deployments with that fix applied and relying on the default FilterScheduler are affected.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 4–8.6
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (3)
Betroffene Produkte und Versionsbereiche.
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- GHSA-vq76-rxx3-4r4rOpenStack Nova DoS by rebuilding the same instance with a new image multiple times2022-05-13ghsa · osvUS
An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was introduced with the fix for OSSA-2017-005 (CVE-2017-16239); however, only Nova stable/pike or later deployments with that fix applied and relying on the default FilterScheduler are affected.
- PYSEC-2026-692OpenStack Nova DoS by rebuilding the same instance with a new image multiple times2026-07-02vendor · osvUS
An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was introduced with the fix for OSSA-2017-005 (CVE-2017-16239); however, only Nova stable/pike or later deployments with that fix applied and relying on the default FilterScheduler are affected.
auch bekannt als (6)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (19)
Externe Belege — Patches, Meldungen, Analysen.
- https://launchpad.net/bugs/1732976cnnvd
- https://review.openstack.org/521662cnnvd
- https://review.openstack.org/523214cnnvd
- https://security.openstack.org/ossa/OSSA-2017-006.htmlcnnvd
- https://www.auscert.org.au/bulletins/ESB-2019.3244/cnnvd
- https://www.auscert.org.au/bulletins/ESB-2019.3330/cnnvd
- https://www.securityfocus.com/bid/102102cnnvd
- https://www.suse.com/support/update/announcement/2019/suse-su-20192219-1.htmlcnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan