Description
An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an encrypted volume, an attacker may access the underlying raw volume and corrupt the LUKS header, resulting in a denial of service attack on the compute host. (The same code error also results in data loss, but that is not a vulnerability because the user loses their own data.) All Nova setups supporting encrypted volumes are affected.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | nova | 2:17.0.0-1 | — |
| Debian 13 | nova | 2:17.0.0-1 | — |
| Debian 12 | nova | 2:17.0.0-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | nova | 2:21.2.4-0ubuntu2.2 | USN-5866-1 |
| Ubuntu 18.04 LTS | nova | 2:17.0.13-0ubuntu5.3 | USN-5866-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 16.04 LTS | nova | 2:13.1.4-0ubuntu4.5+esm1 | USN-5866-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenStack 12 | python-nova +15 | 1:16.1.4-6.el7ost | RHSA-2018:2332 |
| Red Hat OpenStack 10 | python-nova +16 | 1:14.1.0-26.el7ost | RHSA-2018:2714 |
| Red Hat OpenStack 9 | python-nova +15 | 1:13.1.4-24.el7ost | RHSA-2018:2855 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE OpenStack Cloud 7 | openstack-nova +1 | 14.0.11~dev13-4.22.1 | SUSE-SU-2018:1448-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | nova | >= 15.0.0, < 15.1.1 | 15.1.1 | GHSA-ffmh-r67w-m88f |
| PyPI | nova | >= 16.0.0, < 16.1.2 | 16.1.2 | GHSA-ffmh-r67w-m88f |
| PyPI | nova | >= 15.0.0, < 15.1.1 · >= 16.0.0, < 16.1.2 | 15.1.1, 16.1.2 | PYSEC-2026-689 |
Advisories 6
- RHSA-2018:2855 Red Hat Security Advisory: openstack-nova security and bug fix update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2018:2714 Red Hat Security Advisory: openstack-nova security and bug fix update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2018:2332 Red Hat Security Advisory: openstack-nova security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- USN-5866-1 nova vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- SUSE-SU-2018:1448-1 Security update for openstack-nova SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2023-0343 Red Hat OpenStack-Nova: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Feb 12, 2023
References
- 103104 vdb-entry
- RHSA-2018:2714 vendor-advisory
- https://review.openstack.org/539893
- http://openwall.com/lists/oss-security/2018/04/20/3
- https://security.openstack.org/ossa/OSSA-2018-001.html
- RHSA-2018:2332 vendor-advisory
- https://launchpad.net/bugs/1739593
- RHSA-2018:2855 vendor-advisory