Patchfirst
ChainPyPI:nova

nova: related fixes (2016–2020)

3 CVEs over 3 generations, 12 Apr 2016 to 26 Aug 2020.

Family tree

Left to right by publication date.Oldest first. Select a CVE to open it.
  1. CVE-2016-214012 Apr 2016 First in the chain
  2. CVE-2017-1819119 Feb 2018 related to CVE-2016-2140
  3. CVE-2020-1737626 Aug 2020 related to CVE-2017-18191
20162017201820192020 CVE-2016-2140 → CVE-2017-18191: related (medium confidence)CVE-2017-18191 → CVE-2020-17376: related (medium confidence) CVE-2016-2140 12 Apr 2016 CVE-2017-18191 19 Feb 2018 CVE-2020-17376 26 Aug 2020 20162017201820192020 CVE-2016-2140 → CVE-2017-18191: related (medium confidence)CVE-2017-18191 → CVE-2020-17376: related (medium confidence) CVE-2016-2140 12 Apr 2016 CVE-2017-18191 19 Feb 2018 CVE-2020-17376 26 Aug 2020
Exploited in the wild (CISA KEV) Not in KEV Priority score (0 to 100) High confidence Medium Low

CVEs in this family

Table view of the tree
CVEPublishedTitleLinked fromPriority
CVE-2016-2140 12 Apr 2016 The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) and 12.0.x before 12.0.3 (liberty), when using… · fixed in 12.0.3 First in chain 16.3
CVE-2017-18191 19 Feb 2018 An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1 · fixed in 16.1.2 CVE-2016-2140 · related · Medium 18.0
CVE-2020-17376 26 Aug 2020 An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1… · fixed in 21.1.0 CVE-2017-18191 · related · Medium 15.5
↑ ↓ chooseEnter openEsc close