Read the docs
TI-2017-11953 Aliases CVE-2017-16239GHSA-w2wf-cgwh-vpqg

In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by…

Priority LOW 32Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
Partial Red Hat: 4 fixed, 4 without a fix

Attack profile from CVSS 3.0 · NVD. Fix status from CNA, GitHub and Red Hat.

Summary

In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova Filter Scheduler are affected. Because of the regression described in Launchpad Bug #1732947, the preferred fix is a 14.x version after 14.0.10, a 15.x version after 15.0.8, or a 16.x version after 16.0.3.

Why it matters now

EPSS 0.01421 73rd percentileScored 2026-11-07
Fix Partial nova (PyPI): 16.0.3, 15.0.8, 14.0.10Red Hat: 3 advisoriesRed Hat: 4 fixed, 4 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—nova (PyPI)16.0.0 to before 16.0.316.0.3Patch availableGHSA-w2wf-cgwh-vpqg
—nova (PyPI)15.0.0 to before 15.0.815.0.8Patch availableGHSA-w2wf-cgwh-vpqg
—nova (PyPI)14.0.0 to before 14.0.1014.0.10Patch availableGHSA-w2wf-cgwh-vpqg
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • nova (PyPI) Vendor— Affected 16.0.0 to before 16.0.3 Fixed in 16.0.3 Patch available GHSA-w2wf-cgwh-vpqg
  • nova (PyPI) Vendor— Affected 15.0.0 to before 15.0.8 Fixed in 15.0.8 Patch available GHSA-w2wf-cgwh-vpqg
  • nova (PyPI) Vendor— Affected 14.0.0 to before 14.0.10 Fixed in 14.0.10 Patch available GHSA-w2wf-cgwh-vpqg

CPE configurations NVD · 12

CPEVersionsRoleVendor
cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*up to 14.0.9VulnerableOpenStack
cpe:2.3:a:openstack:nova:15.0.0:*:*:*:*:*:*:*15.0.0VulnerableOpenStack
cpe:2.3:a:openstack:nova:15.0.1:*:*:*:*:*:*:*15.0.1VulnerableOpenStack
cpe:2.3:a:openstack:nova:15.0.2:*:*:*:*:*:*:*15.0.2VulnerableOpenStack
cpe:2.3:a:openstack:nova:15.0.3:*:*:*:*:*:*:*15.0.3VulnerableOpenStack
cpe:2.3:a:openstack:nova:15.0.4:*:*:*:*:*:*:*15.0.4VulnerableOpenStack
cpe:2.3:a:openstack:nova:15.0.5:*:*:*:*:*:*:*15.0.5VulnerableOpenStack
cpe:2.3:a:openstack:nova:15.0.6:*:*:*:*:*:*:*15.0.6VulnerableOpenStack
cpe:2.3:a:openstack:nova:15.0.7:*:*:*:*:*:*:*15.0.7VulnerableOpenStack
cpe:2.3:a:openstack:nova:16.0.0:*:*:*:*:*:*:*16.0.0VulnerableOpenStack
  • cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:* Versions up to 14.0.9 Vulnerable ·OpenStack
  • cpe:2.3:a:openstack:nova:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·OpenStack
  • cpe:2.3:a:openstack:nova:15.0.1:*:*:*:*:*:*:* Versions 15.0.1 Vulnerable ·OpenStack
  • cpe:2.3:a:openstack:nova:15.0.2:*:*:*:*:*:*:* Versions 15.0.2 Vulnerable ·OpenStack
  • cpe:2.3:a:openstack:nova:15.0.3:*:*:*:*:*:*:* Versions 15.0.3 Vulnerable ·OpenStack
  • cpe:2.3:a:openstack:nova:15.0.4:*:*:*:*:*:*:* Versions 15.0.4 Vulnerable ·OpenStack
  • cpe:2.3:a:openstack:nova:15.0.5:*:*:*:*:*:*:* Versions 15.0.5 Vulnerable ·OpenStack
  • cpe:2.3:a:openstack:nova:15.0.6:*:*:*:*:*:*:* Versions 15.0.6 Vulnerable ·OpenStack
  • cpe:2.3:a:openstack:nova:15.0.7:*:*:*:*:*:*:* Versions 15.0.7 Vulnerable ·OpenStack
  • cpe:2.3:a:openstack:nova:16.0.0:*:*:*:*:*:*:* Versions 16.0.0 Vulnerable ·OpenStack
Show 2 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:openstack:nova:16.0.1:*:*:*:*:*:*:*16.0.1VulnerableOpenStack
cpe:2.3:a:openstack:nova:16.0.2:*:*:*:*:*:*:*16.0.2VulnerableOpenStack
  • cpe:2.3:a:openstack:nova:16.0.1:*:*:*:*:*:*:* Versions 16.0.1 Vulnerable ·OpenStack
  • cpe:2.3:a:openstack:nova:16.0.2:*:*:*:*:*:*:* Versions 16.0.2 Vulnerable ·OpenStack

Remediation

  • Fix · GHSA-w2wf-cgwh-vpqg nova (PyPI) Fixed in 16.0.3 Advisory →
  • Fix · GHSA-w2wf-cgwh-vpqg nova (PyPI) Fixed in 15.0.8 Advisory →
  • Fix · GHSA-w2wf-cgwh-vpqg nova (PyPI) Fixed in 14.0.10 Advisory →

Red Hat 3 advisories

  • RHSA-2018:0369 Released 2018-02-27 · Red Hat rating Moderate
    openstack-nova and python-novaclient security, bug fix, and enhancement update
    • OpenStack 10.0 Tools for RHEL 7 python-novaclient-1:6.0.2-2.el7ost
    • Red Hat OpenStack Platform 10.0 openstack-nova-1:14.1.0-3.el7ost, openstack-nova-api-1:14.1.0-3.el7ost, openstack-nova-cells-1:14.1.0-3.el7ost +15
  • RHSA-2018:0314 Released 2018-02-13 · Red Hat rating Moderate
    openstack-nova security and bug fix update
    • Red Hat OpenStack Platform 11.0 openstack-nova-1:15.0.8-5.el7ost, openstack-nova-api-1:15.0.8-5.el7ost, openstack-nova-cells-1:15.0.8-5.el7ost +14
  • RHSA-2018:0241 Released 2018-01-30 · Red Hat rating Moderate
    openstack-nova security and bug fix update
    • Red Hat OpenStack Platform 12.0 openstack-nova-1:16.0.2-9.el7ost, openstack-nova-api-1:16.0.2-9.el7ost, openstack-nova-cells-1:16.0.2-9.el7ost +13

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux OpenStack Platform 6 (Juno)AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 8 (Liberty)AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 9 (Mitaka)AffectedNo fix planned: Will not fix
OpenStack 10.0 Tools for RHEL 7Fixed RHSA-2018:0369
Red Hat OpenStack Platform 10.0Fixed RHSA-2018:0369
Red Hat OpenStack Platform 11.0Fixed RHSA-2018:0314
Red Hat OpenStack Platform 12.0Fixed RHSA-2018:0241

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-16239
  2. 2026-10-03 Alias added: GHSA-w2wf-cgwh-vpqg

References

Advisory 6

Other 6

  • TI-2026-34154 In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. CVSS 3.1HIGH 8.5
  • TI-2022-23762 An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and… CVSS 3.1MEDIUM 5.7
  • TI-2021-02596 Open redirect in openstack-nova CVSS 3.1MEDIUM 6.1
  • TI-2017-04900 An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3… CVSS 3.0CRITICAL 9.8
  • TI-2017-12516 An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. CVSS 3.0HIGH 8.6
  • TI-2020-13145 An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova… CVSS 3.1HIGH 8.3
See all 38 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences