OpenStack Nova DoS by rebuilding the same instance with a new image multiple times
GHSA-vq76-rxx3-4r4r · CVE-2017-17051 · PYSEC-2026-692
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was introduced with the fix for OSSA-2017-005 (CVE-2017-16239); however, only Nova stable/pike or later deployments with that fix applied and relying on the default FilterScheduler are affected.
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2017-17051
- WEB https://github.com/openstack/nova/commit/25a1d78e83065c5bea5d8e0a017fd9d0914d41d9
- WEB https://github.com/openstack/nova/commit/fed660c1189fdf4159d97badfdc8c5b35ad14f23
- PACKAGE https://github.com/openstack/nova
- WEB https://launchpad.net/bugs/1732976
- WEB https://review.openstack.org/521662
- WEB https://review.openstack.org/523214
- WEB https://security.openstack.org/ossa/OSSA-2017-006.html
- WEB http://www.securityfocus.com/bid/102102
Ready to move
Start Securing
Free, no credit card | First findings in minutes