One post tagged with "nova"

The vulnerability​

When talking to the OpenStack Nova Compute API, Users can specify scheduler hints, expressing preferences for Server (VM) placement. Users can however inject a values {"_nova_check_type": "rebuild"} that is only meant to be used internally in the rebuild context which causes certain resource checks to be skipped. This can cause placement contraints such as host aggregates, AZs, image traits to be ignored and cause PCI pass-through resources to not be properly mapped. While the assigned quota is still observed, the vulnerability may cause exhaustion of resources and confusion of the scheduler (placement) state and thus may result in a Denial of Service for certain resource types.