CVE-2017-17051High· 8.6▾ TwilightOpenStack Nova DoS by rebuilding the same instance with a new image multiple times
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 47.3 · likelihood 0.3 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
2.0%
2.0% → 2.0%
An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was introduced with the fix for OSSA-2017-005 (CVE-2017-16239); however, only Nova stable/pike or later deployments with that fix applied and relying on the default FilterScheduler are affected.
nova < 16.0.4Upgrade to a patched release:
nova 16.0.4Connected by shared product, vendor, weakness, or advisory.
CVE-2017-16239Medium· 6.5OpenStack Nova Filter Scheduler Bypass
CVE-2022-37394Low· 3.3OpenStack Nova Changing vnic_type breaks compute service restart
CVE-2024-40767Medium· 6.5OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
CVE-2011-4596MediumOpenStack Nova Multiple directory traversal vulnerabilities
CVE-2012-1585MediumOpenStack Nova Long server names grow nova-api log files significantly
CVE-2013-4185MediumOpenStack Nova Denial of Service in network source security groups