CVE-2017-17051

An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was introduced with the fix for OSSA-2017-005 (CVE-2017-16239); however, only Nova stable/pike or later deployments with that fix applied and relying on the default FilterScheduler are affected.

• CWE-400

• http://www.securityfocus.com/bid/102102Third Party Advisory, VDB Entry
• https://launchpad.net/bugs/1732976Issue Tracking, Third Party Advisory
• https://review.openstack.org/521662Vendor Advisory
• https://review.openstack.org/523214Vendor Advisory
• https://security.openstack.org/ossa/OSSA-2017-006.htmlVendor Advisory
• http://www.securityfocus.com/bid/102102Third Party Advisory, VDB Entry
• https://launchpad.net/bugs/1732976Issue Tracking, Third Party Advisory
• https://review.openstack.org/521662Vendor Advisory
• https://review.openstack.org/523214Vendor Advisory
• https://security.openstack.org/ossa/OSSA-2017-006.htmlVendor Advisory

Published

Dec 5, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-17044An issue was discovered in Xen through 4.9.x allowing HVM gu…
• CVE-2017-17045An issue was discovered in Xen through 4.9.x allowing HVM gu…
• CVE-2017-17046An issue was discovered in Xen through 4.9.x on the ARM plat…
• CVE-2017-17049TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to ca…
• CVE-2017-1705IBM Security Privileged Identity Manager 2.1.0 contains left…4.3
• CVE-2017-17050TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to ca…
• CVE-2017-17052The mm_init function in kernel/fork.c in the Linux kernel be…7.8
• CVE-2017-17053The init_new_context function in arch/x86/include/asm/mmu_co…7
• CVE-2017-17054In aubio 0.4.6, a divide-by-zero error exists in the functio…
• CVE-2017-17055Artica Web Proxy before 3.06.112911 allows remote attackers …
• CVE-2017-17056The ZKTime Web Software 2.0.1.12280 allows the Administrator…
• CVE-2017-17057There is a reflected XSS vulnerability in ZKTime Web 2.0.1.1…