UBUNTU-CVE-2017-18191

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2017-18191

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2017/UBUNTU-CVE-2017-18191.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2017-18191

Related

Published

2018-02-19T17:29:00Z

Modified

2018-02-19T17:29:00Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an encrypted volume, an attacker may access the underlying raw volume and corrupt the LUKS header, resulting in a denial of service attack on the compute host. (The same code error also results in data loss, but that is not a vulnerability because the user loses their own data.) All Nova setups supporting encrypted volumes are affected.

References

Affected packages

Ubuntu:Pro:16.04:LTS / nova

Package

Name: nova
Purl: pkg:deb/ubuntu/nova?arch=src?distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:13.1.4-0ubuntu4.5+esm1

Affected versions

2:12.*

2:12.0.0-0ubuntu2

2:13.*

2:13.0.0~b1-0ubuntu1

2:13.0.0~b2-0ubuntu1

2:13.0.0~b3-0ubuntu1

2:13.0.0~rc1-0ubuntu1

2:13.0.0~rc3-0ubuntu1

2:13.0.0-0ubuntu1

2:13.0.0-0ubuntu2

2:13.0.0-0ubuntu5

2:13.1.0-0ubuntu1

2:13.1.1-0ubuntu1

2:13.1.1-0ubuntu1.1

2:13.1.2-0ubuntu2

2:13.1.3-0ubuntu1

2:13.1.3-0ubuntu2

2:13.1.4-0ubuntu1

2:13.1.4-0ubuntu2

2:13.1.4-0ubuntu3

2:13.1.4-0ubuntu4.1

2:13.1.4-0ubuntu4.2

2:13.1.4-0ubuntu4.3

2:13.1.4-0ubuntu4.4

2:13.1.4-0ubuntu4.5

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-ajax-console-proxy"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-api"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-api-metadata"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-api-os-compute"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-api-os-volume"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-cells"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-cert"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-common"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-compute"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-compute-kvm"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-compute-libvirt"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-compute-lxc"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-compute-qemu"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-compute-vmware"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-compute-xen"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-conductor"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-console"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-consoleauth"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-doc"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-network"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-novncproxy"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-scheduler"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-serialproxy"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-spiceproxy"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-volume"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "nova-xvpvncproxy"
        },
        {
            "binary_version": "2:13.1.4-0ubuntu4.5+esm1",
            "binary_name": "python-nova"
        }
    ]
}

Ubuntu:18.04:LTS / nova

Package

Name: nova
Purl: pkg:deb/ubuntu/nova?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:17.0.3-0ubuntu1

Affected versions

2:16.*

2:16.0.1-0ubuntu1

2:16.0.1-0ubuntu2

2:17.*

2:17.0.0~b1-0ubuntu1

2:17.0.0~b2-0ubuntu2

2:17.0.0~b3-0ubuntu3

2:17.0.0~b3-0ubuntu4

2:17.0.0~rc1-0ubuntu1

2:17.0.0~rc2-0ubuntu1

2:17.0.0~rc3-0ubuntu1

2:17.0.0-0ubuntu1

2:17.0.1-0ubuntu1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-ajax-console-proxy"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-api"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-api-metadata"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-api-os-compute"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-api-os-volume"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-cells"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-common"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-compute"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-compute-kvm"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-compute-libvirt"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-compute-lxc"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-compute-qemu"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-compute-vmware"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-compute-xen"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-conductor"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-console"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-consoleauth"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-doc"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-network"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-novncproxy"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-placement-api"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-scheduler"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-serialproxy"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-spiceproxy"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-volume"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "nova-xvpvncproxy"
        },
        {
            "binary_version": "2:17.0.3-0ubuntu1",
            "binary_name": "python-nova"
        }
    ]
}