CVE-2017-16239
OpenStack Nova Filter Scheduler Bypass
CVE-2017-16239 is a medium vulnerability (CVSS 6.5) in Openstack Nova, published November 14, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.42%, the 72nd percentile. Fixed in nova 16.0.3.
In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova Filter Scheduler are affected. Because of the regression described in Launchpad Bug #1732947, the preferred fix is a 14.x version after 14.0.10, a 15.x version after 15.0.8, or a 16.x version after 16.0.3.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova Filter Scheduler are affected. Because of the regression described in Launchpad Bug #1732947, the preferred fix is a 14.x version after 14.0.10, a 15.x version after 15.0.8, or a 16.x version after 16.0.3.
- Record
CVE-2017-16239- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N - CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova Filter Scheduler are affected. Because of the regression described in Launchpad Bug #1732947, the preferred fix is a 14.x version after 14.0.10, a 15.x version after 15.0.8, or a 16.x version after 16.0.3.
- Record
CVE-2017-16239- Updated
- 2026-11-02
EUVDEUVD-2022-5467 No score
In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova Filter Scheduler are affected. Because of the regression described in Launchpad Bug #1732947, the preferred fix is a 14.x version after 14.0.10, a 15.x version after 15.0.8, or a 16.x version after 16.0.3.
- Record
EUVD-2022-5467- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w2wf-cgwh-vpqg
OpenStack Nova Filter Scheduler Bypass
In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova Filter Scheduler are affected. Because of the regression described in Launchpad Bug #1732947, the preferred fix is a 14.x version after 14.0.10, a 15.x version after 15.0.8, or a 16.x version after 16.0.3.
- Record
GHSA-w2wf-cgwh-vpqg- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSV
In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova Filter Scheduler are affected. Because of the regression described in Launchpad Bug #1732947, the preferred fix is a 14.x version after 14.0.10, a 15.x version after 15.0.8, or a 16.x version after 16.0.3.
- Record
CVE-2017-16239- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2017-16239
In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova Filter Scheduler are affected. Because of the regression described in Launchpad Bug #1732947, the preferred fix is a 14.x version after 14.0.10, a 15.x version after 15.0.8, or a 16.x version after 16.0.3.
- Record
DEBIAN-CVE-2017-16239- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
Show 7 moreShow less
OSVGHSA-w2wf-cgwh-vpqg
OpenStack Nova Filter Scheduler Bypass
In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova Filter Scheduler are affected. Because of the regression described in Launchpad Bug #1732947, the preferred fix is a 14.x version after 14.0.10, a 15.x version after 15.0.8, or a 16.x version after 16.0.3.
- Record
GHSA-w2wf-cgwh-vpqg- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVPYSEC-2026-694
OpenStack Nova Filter Scheduler Bypass
In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova Filter Scheduler are affected. Because of the regression described in Launchpad Bug #1732947, the preferred fix is a 14.x version after 14.0.10, a 15.x version after 15.0.8, or a 16.x version after 16.0.3.
- Record
PYSEC-2026-694- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2018:0241
Red Hat Security Advisory: openstack-nova security and bug fix update
- Record
RHSA-2018:0241- CVSS 3.0
- 5.4 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2018:0314
Red Hat Security Advisory: openstack-nova security and bug fix update
- Record
RHSA-2018:0314- CVSS 3.0
- 5.4 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2018:0369
Red Hat Security Advisory: openstack-nova and python-novaclient security, bug fix, and enhancement update
- Record
RHSA-2018:0369- CVSS 3.0
- 5.4 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-16239
In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHostsFilter). All setups using Nova Filter Scheduler are affected. Because of the regression described in Launchpad Bug #1732947, the preferred fix is a 14.x version after 14.0.10, a 15.x version after 15.0.8, or a 16.x version after 16.0.3.
- Record
UBUNTU-CVE-2017-16239- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVSUSE-SU-2017:3080-1 No score
Security update for openstack-nova
This update for openstack-nova brings the latest version provided by the OpenStack upstream project including the following security fix:
- CVE-2017-16239: Filter Scheduler bypass through rebuild action (bsc#1066198).
- Record
SUSE-SU-2017:3080-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
novaPyPI |
16.0.0 up to 16.0.3 | 16.0.3 |
novaPyPI |
15.0.0 up to 15.0.8 | 15.0.8 |
novaPyPI |
14.0.0 up to 14.0.10 | 14.0.10 |
novaDebian:12 |
before 2:16.0.3-1 | 2:16.0.3-1 |
novaDebian:13 |
before 2:16.0.3-1 | 2:16.0.3-1 |
novaDebian:14 |
before 2:16.0.3-1 | 2:16.0.3-1 |
novaDebian:9 |
before 2:14.0.0-4+deb9u1, plus listed versions 2:14.0.0-4 |
2:14.0.0-4+deb9u1 |
novaPyPI |
14.0.0 up to 14.0.10, 15.0.0 up to 15.0.8, 16.0.0 up to 16.0.3 | 14.0.1015.0.816.0.3 |
openstack-novaRed Hat:openstack:12::el7 |
before 1:16.0.2-9.el7ost | 1:16.0.2-9.el7ost |
openstack-nova-apiRed Hat:openstack:12::el7 |
before 1:16.0.2-9.el7ost | 1:16.0.2-9.el7ost |
Show 52 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openstack-nova-cellsRed Hat:openstack:12::el7 |
before 1:16.0.2-9.el7ost | 1:16.0.2-9.el7ost |
openstack-nova-commonRed Hat:openstack:12::el7 |
before 1:16.0.2-9.el7ost | 1:16.0.2-9.el7ost |
openstack-nova-computeRed Hat:openstack:12::el7 |
before 1:16.0.2-9.el7ost | 1:16.0.2-9.el7ost |
openstack-nova-conductorRed Hat:openstack:12::el7 |
before 1:16.0.2-9.el7ost | 1:16.0.2-9.el7ost |
openstack-nova-consoleRed Hat:openstack:12::el7 |
before 1:16.0.2-9.el7ost | 1:16.0.2-9.el7ost |
openstack-nova-migrationRed Hat:openstack:12::el7 |
before 1:16.0.2-9.el7ost | 1:16.0.2-9.el7ost |
openstack-nova-networkRed Hat:openstack:12::el7 |
before 1:16.0.2-9.el7ost | 1:16.0.2-9.el7ost |
openstack-nova-novncproxyRed Hat:openstack:12::el7 |
before 1:16.0.2-9.el7ost | 1:16.0.2-9.el7ost |
openstack-nova-placement-apiRed Hat:openstack:12::el7 |
before 1:16.0.2-9.el7ost | 1:16.0.2-9.el7ost |
openstack-nova-schedulerRed Hat:openstack:12::el7 |
before 1:16.0.2-9.el7ost | 1:16.0.2-9.el7ost |
openstack-nova-serialproxyRed Hat:openstack:12::el7 |
before 1:16.0.2-9.el7ost | 1:16.0.2-9.el7ost |
openstack-nova-spicehtml5proxyRed Hat:openstack:12::el7 |
before 1:16.0.2-9.el7ost | 1:16.0.2-9.el7ost |
python-novaRed Hat:openstack:12::el7 |
before 1:16.0.2-9.el7ost | 1:16.0.2-9.el7ost |
python-nova-testsRed Hat:openstack:12::el7 |
before 1:16.0.2-9.el7ost | 1:16.0.2-9.el7ost |
openstack-novaRed Hat:openstack:11::el7 |
before 1:15.0.8-5.el7ost | 1:15.0.8-5.el7ost |
openstack-nova-apiRed Hat:openstack:11::el7 |
before 1:15.0.8-5.el7ost | 1:15.0.8-5.el7ost |
openstack-nova-cellsRed Hat:openstack:11::el7 |
before 1:15.0.8-5.el7ost | 1:15.0.8-5.el7ost |
openstack-nova-certRed Hat:openstack:11::el7 |
before 1:15.0.8-5.el7ost | 1:15.0.8-5.el7ost |
openstack-nova-commonRed Hat:openstack:11::el7 |
before 1:15.0.8-5.el7ost | 1:15.0.8-5.el7ost |
openstack-nova-computeRed Hat:openstack:11::el7 |
before 1:15.0.8-5.el7ost | 1:15.0.8-5.el7ost |
openstack-nova-conductorRed Hat:openstack:11::el7 |
before 1:15.0.8-5.el7ost | 1:15.0.8-5.el7ost |
openstack-nova-consoleRed Hat:openstack:11::el7 |
before 1:15.0.8-5.el7ost | 1:15.0.8-5.el7ost |
openstack-nova-migrationRed Hat:openstack:11::el7 |
before 1:15.0.8-5.el7ost | 1:15.0.8-5.el7ost |
openstack-nova-networkRed Hat:openstack:11::el7 |
before 1:15.0.8-5.el7ost | 1:15.0.8-5.el7ost |
openstack-nova-novncproxyRed Hat:openstack:11::el7 |
before 1:15.0.8-5.el7ost | 1:15.0.8-5.el7ost |
openstack-nova-placement-apiRed Hat:openstack:11::el7 |
before 1:15.0.8-5.el7ost | 1:15.0.8-5.el7ost |
openstack-nova-schedulerRed Hat:openstack:11::el7 |
before 1:15.0.8-5.el7ost | 1:15.0.8-5.el7ost |
openstack-nova-serialproxyRed Hat:openstack:11::el7 |
before 1:15.0.8-5.el7ost | 1:15.0.8-5.el7ost |
openstack-nova-spicehtml5proxyRed Hat:openstack:11::el7 |
before 1:15.0.8-5.el7ost | 1:15.0.8-5.el7ost |
python-novaRed Hat:openstack:11::el7 |
before 1:15.0.8-5.el7ost | 1:15.0.8-5.el7ost |
python-nova-testsRed Hat:openstack:11::el7 |
before 1:15.0.8-5.el7ost | 1:15.0.8-5.el7ost |
python-novaclientRed Hat:openstack:10::el7 |
before 1:6.0.2-2.el7ost | 1:6.0.2-2.el7ost |
openstack-novaRed Hat:openstack:10::el7 |
before 1:14.1.0-3.el7ost | 1:14.1.0-3.el7ost |
openstack-nova-apiRed Hat:openstack:10::el7 |
before 1:14.1.0-3.el7ost | 1:14.1.0-3.el7ost |
openstack-nova-cellsRed Hat:openstack:10::el7 |
before 1:14.1.0-3.el7ost | 1:14.1.0-3.el7ost |
openstack-nova-certRed Hat:openstack:10::el7 |
before 1:14.1.0-3.el7ost | 1:14.1.0-3.el7ost |
openstack-nova-commonRed Hat:openstack:10::el7 |
before 1:14.1.0-3.el7ost | 1:14.1.0-3.el7ost |
openstack-nova-computeRed Hat:openstack:10::el7 |
before 1:14.1.0-3.el7ost | 1:14.1.0-3.el7ost |
openstack-nova-conductorRed Hat:openstack:10::el7 |
before 1:14.1.0-3.el7ost | 1:14.1.0-3.el7ost |
openstack-nova-consoleRed Hat:openstack:10::el7 |
before 1:14.1.0-3.el7ost | 1:14.1.0-3.el7ost |
openstack-nova-migrationRed Hat:openstack:10::el7 |
before 1:14.1.0-3.el7ost | 1:14.1.0-3.el7ost |
openstack-nova-networkRed Hat:openstack:10::el7 |
before 1:14.1.0-3.el7ost | 1:14.1.0-3.el7ost |
openstack-nova-novncproxyRed Hat:openstack:10::el7 |
before 1:14.1.0-3.el7ost | 1:14.1.0-3.el7ost |
openstack-nova-placement-apiRed Hat:openstack:10::el7 |
before 1:14.1.0-3.el7ost | 1:14.1.0-3.el7ost |
openstack-nova-schedulerRed Hat:openstack:10::el7 |
before 1:14.1.0-3.el7ost | 1:14.1.0-3.el7ost |
openstack-nova-serialproxyRed Hat:openstack:10::el7 |
before 1:14.1.0-3.el7ost | 1:14.1.0-3.el7ost |
openstack-nova-spicehtml5proxyRed Hat:openstack:10::el7 |
before 1:14.1.0-3.el7ost | 1:14.1.0-3.el7ost |
python-novaRed Hat:openstack:10::el7 |
before 1:14.1.0-3.el7ost | 1:14.1.0-3.el7ost |
python-nova-testsRed Hat:openstack:10::el7 |
before 1:14.1.0-3.el7ost | 1:14.1.0-3.el7ost |
openstack-novaSUSE:OpenStack Cloud 7 |
before 14.0.10~dev13-4.11.1 | 14.0.10~dev13-4.11.1 |
openstack-nova-docSUSE:OpenStack Cloud 7 |
before 14.0.10~dev13-4.11.3 | 14.0.10~dev13-4.11.3 |
novaUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2:12.0.0-0ubuntu22:13.0.0~b1-0ubuntu12:13.0.0~b2-0ubuntu12:13.0.0~b3-0ubuntu12:13.0.0~rc1-0ubuntu1 Show 19 moreShow less2:13.0.0~rc3-0ubuntu12:13.0.0-0ubuntu12:13.0.0-0ubuntu22:13.0.0-0ubuntu52:13.1.0-0ubuntu12:13.1.1-0ubuntu12:13.1.1-0ubuntu1.12:13.1.2-0ubuntu22:13.1.3-0ubuntu12:13.1.3-0ubuntu22:13.1.4-0ubuntu12:13.1.4-0ubuntu22:13.1.4-0ubuntu32:13.1.4-0ubuntu4.12:13.1.4-0ubuntu4.22:13.1.4-0ubuntu4.32:13.1.4-0ubuntu4.42:13.1.4-0ubuntu4.52:13.1.4-0ubuntu4.5+esm1 |
None known |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
securityfocus.com/bid/101950
access.redhat.com/errata/RHSA-2018:0369
debian.org/security/2017/dsa-4056
launchpad.net/bugs/1664931
security.openstack.org/ossa/OSSA-2017-005.html
Show 37 moreShow less
nvd.nist.gov/vuln/detail/CVE-2017-16239
github.com/openstack/nova/commit/698b261a5a2a6c0f31ef5059046ef7196d5cba30
security-tracker.debian.org/tracker/CVE-2017-16239
pypi.org/project/nova
bugzilla.redhat.com/show_bug.cgi?id=1508539
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0241.json
cve.org/CVERecord?id=CVE-2017-16239
suse.com/support/update/announcement/2017/suse-su-20173080-1
bugzilla.suse.com/1066198
ubuntu.com/security/CVE-2017-16239