CVE-2017-17051
HighSummary
An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. An authenticated user may repeatedly rebuild an instance with new images, leading to untracked resource consumption on a hypervisor host, resulting in denial of service.
Risk Assessment
The organization may experience denial of service due to doubled resource allocations, potentially leading to decreased system performance and increased operational costs.
Recommendation
It is recommended to upgrade to the latest version of OpenStack Nova and monitor resource usage on hypervisor hosts to minimize the risk associated with this vulnerability.
Other vulnerabilities in OpenStack Nova
See all- CVE-2017-7214Critical
An issue was discovered in exception_wrapper.py in OpenStack Nova versions 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.
- CVE-2026-24708High
An issue in OpenStack Nova before versions 30.2.2, 31.2.1, and 32.1.1 allows a user to trigger an unsafe image resize operation by writing a malicious QCOW header to a root or ephemeral disk. This causes the Flat image backend to call qemu-img without format restrictions, potentially destroying data on the host system.
Original NVD description (English source)
An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was introduced with the fix for OSSA-2017-005 (CVE-2017-16239); however, only Nova stable/pike or later deployments with that fix applied and relying on the default FilterScheduler are affected.