Vulnerability Description
An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an encrypted volume, an attacker may access the underlying raw volume and corrupt the LUKS header, resulting in a denial of service attack on the compute host. (The same code error also results in data loss, but that is not a vulnerability because the user loses their own data.) All Nova setups supporting encrypted volumes are affected.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Openstack | Nova | >= 15.0.0, <= 15.1.0 |
| Redhat | Openstack | 9 |
References
- http://openwall.com/lists/oss-security/2018/04/20/3Mailing ListPatchThird Party Advisory
- http://www.securityfocus.com/bid/103104Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2018:2332Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2714Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2855Third Party Advisory
- https://launchpad.net/bugs/1739593ExploitIssue TrackingThird Party Advisory
- https://review.openstack.org/539893ExploitPatchThird Party Advisory
- https://security.openstack.org/ossa/OSSA-2018-001.htmlPatchVendor Advisory
- http://openwall.com/lists/oss-security/2018/04/20/3Mailing ListPatchThird Party Advisory
- http://www.securityfocus.com/bid/103104Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2018:2332Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2714Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2855Third Party Advisory
- https://launchpad.net/bugs/1739593ExploitIssue TrackingThird Party Advisory
- https://review.openstack.org/539893ExploitPatchThird Party Advisory
FAQ
What is CVE-2017-18191?
CVE-2017-18191 is a vulnerability with a CVSS score of 7.5 (HIGH). An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an encrypted volume, an attacker may access the underlying raw volume and corrupt th...
How severe is CVE-2017-18191?
CVE-2017-18191 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-18191?
Check the references section above for vendor advisories and patch information. Affected products include: Openstack Nova, Redhat Openstack.