High severity7.5NVD Advisory· Published Feb 19, 2018· Updated Jun 17, 2026
CVE-2017-18191
CVE-2017-18191
Description
An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an encrypted volume, an attacker may access the underlying raw volume and corrupt the LUKS header, resulting in a denial of service attack on the compute host. (The same code error also results in data loss, but that is not a vulnerability because the user loses their own data.) All Nova setups supporting encrypted volumes are affected.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
novaPyPI | >= 15.0.0, < 15.1.1 | 15.1.1 |
novaPyPI | >= 16.0.0, < 16.1.2 | 16.1.2 |
Affected products
3- ghsa-coords3 versionspkg:pypi/novapkg:rpm/suse/openstack-nova&distro=SUSE%20OpenStack%20Cloud%207pkg:rpm/suse/openstack-nova-doc&distro=SUSE%20OpenStack%20Cloud%207
>= 15.0.0, < 15.1.1+ 2 more
- (no CPE)range: >= 15.0.0, < 15.1.1
- (no CPE)range: < 14.0.11~dev13-4.22.1
- (no CPE)range: < 14.0.11~dev13-4.22.1
Patches
Vulnerability mechanics
References
13- openwall.com/lists/oss-security/2018/04/20/3nvdMailing ListPatchThird Party AdvisoryWEB
- security.openstack.org/ossa/OSSA-2018-001.htmlnvdPatchVendor AdvisoryWEB
- launchpad.net/bugs/1739593nvdExploitIssue TrackingThird Party AdvisoryWEB
- review.openstack.org/539893nvdExploitPatchThird Party AdvisoryWEB
- www.securityfocus.com/bid/103104nvdThird Party AdvisoryVDB EntryWEB
- access.redhat.com/errata/RHSA-2018:2332nvdThird Party AdvisoryWEB
- access.redhat.com/errata/RHSA-2018:2714nvdThird Party AdvisoryWEB
- access.redhat.com/errata/RHSA-2018:2855nvdThird Party AdvisoryWEB
- github.com/advisories/GHSA-ffmh-r67w-m88fghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2017-18191ghsaADVISORY
- github.com/openstack/nova/commit/0225a61fc4557c1257383a654f0741f7ef2ddeacghsaWEB
- github.com/openstack/nova/commit/5b64a1936122eeb35f37a09f9d38159e1a224c58ghsaWEB
- github.com/openstack/nova/commit/cd3eb60c2c00bcccfa9ccd4bf9d1a96ae7a5cd88ghsaWEB
News mentions
0No linked articles in our index yet.