An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1.
Priority LOW 39Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Partial Red Hat: 3 fixed, 6 without a fix
Attack profile from CVSS 3.0 · NVD. Fix status from CNA, GitHub and Red Hat.
Summary
An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an encrypted volume, an attacker may access the underlying raw volume and corrupt the LUKS header, resulting in a denial of service attack on the compute host. (The same code error also results in data loss, but that is not a vulnerability because the user loses their own data.) All Nova setups supporting encrypted volumes are affected.
Why it matters now
EPSS 0.03715 89th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix Partial nova (PyPI): 15.1.1, 16.1.2Red Hat: 3 advisoriesRed Hat: 3 fixed, 6 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | nova (PyPI) | 15.0.0 to before 15.1.1 | 15.1.1 | Patch available | GHSA-ffmh-r67w-m88f |
| — | nova (PyPI) | 16.0.0 to before 16.1.2 | 16.1.2 | Patch available | GHSA-ffmh-r67w-m88f |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- nova (PyPI) Vendor— Affected 15.0.0 to before 15.1.1 Fixed in 15.1.1 Patch available GHSA-ffmh-r67w-m88f
- nova (PyPI) Vendor— Affected 16.0.0 to before 16.1.2 Fixed in 16.1.2 Patch available GHSA-ffmh-r67w-m88f
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:* | 15.0.0 – 15.1.0; 16.0.0 – 16.1.1 | Vulnerable | OpenStack |
| cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:* | 9 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:* | 10 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:* | 12 | Vulnerable | Red Hat |
- cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:* Versions 15.0.0 – 15.1.0; 16.0.0 – 16.1.1 Vulnerable ·OpenStack
- cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:* Versions 9 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:* Versions 10 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:* Versions 12 Vulnerable ·Red Hat
Remediation
- Fix · GHSA-ffmh-r67w-m88f nova (PyPI) Fixed in 15.1.1 Advisory →
- Fix · GHSA-ffmh-r67w-m88f nova (PyPI) Fixed in 16.1.2 Advisory →
Red Hat 3 advisories
- RHSA-2018:2855 Released 2018-10-02 · Red Hat rating Moderateopenstack-nova security and bug fix update
- Red Hat OpenStack Platform 9.0 openstack-nova-1:13.1.4-24.el7ost, openstack-nova-api-1:13.1.4-24.el7ost, openstack-nova-cells-1:13.1.4-24.el7ost +13
- RHSA-2018:2714 Released 2018-09-17 · Red Hat rating Moderateopenstack-nova security and bug fix update
- Red Hat OpenStack Platform 10.0 openstack-nova-1:14.1.0-26.el7ost, openstack-nova-api-1:14.1.0-26.el7ost, openstack-nova-cells-1:14.1.0-26.el7ost +14
- RHSA-2018:2332 Released 2018-08-20 · Red Hat rating Moderateopenstack-nova security, bug fix, and enhancement update
- Red Hat OpenStack Platform 12.0 openstack-nova-1:16.1.4-6.el7ost, openstack-nova-api-1:16.1.4-6.el7ost, openstack-nova-cells-1:16.1.4-6.el7ost +13
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) | Affected | No fix planned: Will not fix |
| Red Hat OpenStack Platform 11 (Ocata) | Affected | No fix planned: Will not fix |
| Red Hat OpenStack Platform 16.2 | Affected | No fix planned: Out of support scope |
| Red Hat OpenStack Platform 17.1 | Affected | No fix planned: Out of support scope |
| Red Hat OpenStack Platform 18.0 | Affected | No fix yet: Fix deferred |
| Red Hat OpenStack Platform 8 (Liberty) | Affected | No fix planned: Will not fix |
| Red Hat OpenStack Platform 10.0 | Fixed | RHSA-2018:2714 |
| Red Hat OpenStack Platform 12.0 | Fixed | RHSA-2018:2332 |
| Red Hat OpenStack Platform 9.0 | Fixed | RHSA-2018:2855 |
Not affected: 1 product
- Red Hat OpenStack Platform 13 (Queens)
Timeline
- 2026-10-02 Threatist record created from CVE-2017-18191
- 2026-10-03 Alias added: GHSA-ffmh-r67w-m88f
- 2026-10-07 Affected versions changed · Red Hat
References
Patch 2
Sources
- CVE-2017-18191 · CVE Program
- CVE-2017-18191 · NVD
- FIRST EPSS
- GHSA-ffmh-r67w-m88f · GitHub Advisory Database · CC BY 4.0
- CVE-2017-18191 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences