Skip to content
OpenAdvisories
High RHSA-2018:2332 1 CVE

Red Hat Security Advisory: openstack-nova security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Oct 8, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova 1:16.1.4-6.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-api 1:16.1.4-6.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-cells 1:16.1.4-6.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-common 1:16.1.4-6.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-compute 1:16.1.4-6.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-conductor 1:16.1.4-6.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-console 1:16.1.4-6.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-migration 1:16.1.4-6.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-network 1:16.1.4-6.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-novncproxy 1:16.1.4-6.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-placement-api 1:16.1.4-6.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-scheduler 1:16.1.4-6.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-serialproxy 1:16.1.4-6.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-spicehtml5proxy 1:16.1.4-6.el7ost
Red Hat · OpenStack 12 openstack:12::el7 python-nova 1:16.1.4-6.el7ost
Red Hat · OpenStack 12 openstack:12::el7 python-nova-tests 1:16.1.4-6.el7ost

Vulnerabilities 1

  • High 7.5
    CVE-2017-18191

    OpenStack Nova Denial of service attack on the compute host

    An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an encrypted volume, an attacker may access the underlying raw volume and corrupt the LUKS header, resulting in a denial of service attack on t…

    nova nova nova Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/12/html/release_notes/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1516271
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1537047
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1539703
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1546937
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1547578
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1556851
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1557938
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1558706
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1569955
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1570314
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1572836
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1573799
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1575985
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1579785
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1590514
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1591212
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1591296
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2332.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-18191
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-18191
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-18191