REDHAT-BUG-1508539
First published: Wed Nov 01 2017(Updated: )
By rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova Filter Scheduler are affected. Affected versions: <=14.0.9, >=15.0.0 <=15.0.7, >=16.0.0 <=16.0.2 Bug report: <a href="https://launchpad.net/bugs/1664931">https://launchpad.net/bugs/1664931</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OpenStack Compute (Nova) | <=14.0.9>=15.0.0<=15.0.7>=16.0.0<=16.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://launchpad.net/bugs/1664931
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1346603&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1346603&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1346604&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1346604&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1346605&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1346605&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1346606&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1346606&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1513187
- https://access.redhat.com/errata/RHSA-2018:0241
- https://access.redhat.com/errata/RHSA-2018:0314
- https://access.redhat.com/errata/RHSA-2018:0369
- https://bugzilla.redhat.com/show_bug.cgi?id=1508539
Frequently Asked Questions
What is the severity of REDHAT-BUG-1508539?
The severity of REDHAT-BUG-1508539 is classified as a medium risk due to the potential circumvention of security filters.
How do I fix REDHAT-BUG-1508539?
To fix REDHAT-BUG-1508539, upgrade your OpenStack Nova to versions 15.0.8 or higher and ensure proper filter configurations.
Who is affected by REDHAT-BUG-1508539?
All setups using the Nova Filter Scheduler in OpenStack versions 14.0.9 and 15.0.0 to 15.0.7 are affected by REDHAT-BUG-1508539.
What systems are impacted by REDHAT-BUG-1508539?
The systems impacted by REDHAT-BUG-1508539 include any OpenStack Nova deployments that utilize the Filter Scheduler feature.
What is the nature of the vulnerability in REDHAT-BUG-1508539?
The vulnerability in REDHAT-BUG-1508539 allows authenticated users to bypass imposed filters when rebuilding instances.
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2017-16239
- agent/type
- agent/references
- agent/severity
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/openstack
- canonical/openstack compute (nova)