{
  "cveId": "CVE-2020-17376",
  "url": "https://patchblox.com/security/cve/CVE-2020-17376",
  "summary": "CVE-2020-17376 is fixed in 27 products on 1 platform, first by nova-ajax-console-proxy 2:17.0.13-0ubuntu5.3, released March 2, 2022. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "nova-ajax-console-proxy: An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1...",
  "description": "An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a soft reboot of an instance that has previously undergone live migration, a user may gain access to destination host devices that share the same paths as host devices previously referenced by the virtual machine on the source host. This can include block devices that map to different Cinder volumes at the destination than at the source. Only deployments allowing host-based connections (for instance, root and ephemeral devices) are affected.",
  "published": "2020-08-26T12:15:00Z",
  "severity": "Low",
  "epss": 0.01763,
  "epssPercentile": 0.78166,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "nova-ajax-console-proxy",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-ajax-console-proxy 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-ajax-console-proxy-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-ajax-console-proxy",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:21.2.4-0ubuntu2.1",
      "fix": "nova-ajax-console-proxy 2:21.2.4-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nova-ajax-console-proxy-2-21.2.4-0ubuntu2.1",
      "released": "2023-01-26T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-api",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-api 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-api-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-api",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:21.2.4-0ubuntu2.1",
      "fix": "nova-api 2:21.2.4-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nova-api-2-21.2.4-0ubuntu2.1",
      "released": "2023-01-26T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-api-metadata",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-api-metadata 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-api-metadata-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-api-metadata",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:21.2.4-0ubuntu2.1",
      "fix": "nova-api-metadata 2:21.2.4-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nova-api-metadata-2-21.2.4-0ubuntu2.1",
      "released": "2023-01-26T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-api-os-compute",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-api-os-compute 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-api-os-compute-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-api-os-compute",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:21.2.4-0ubuntu2.1",
      "fix": "nova-api-os-compute 2:21.2.4-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nova-api-os-compute-2-21.2.4-0ubuntu2.1",
      "released": "2023-01-26T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-api-os-volume",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-api-os-volume 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-api-os-volume-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-api-os-volume",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:21.2.4-0ubuntu2.1",
      "fix": "nova-api-os-volume 2:21.2.4-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nova-api-os-volume-2-21.2.4-0ubuntu2.1",
      "released": "2023-01-26T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-cells",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-cells 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-cells-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-cells",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:21.2.4-0ubuntu2.1",
      "fix": "nova-cells 2:21.2.4-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nova-cells-2-21.2.4-0ubuntu2.1",
      "released": "2023-01-26T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-common",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-common 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-common-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-common",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:21.2.4-0ubuntu2.1",
      "fix": "nova-common 2:21.2.4-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nova-common-2-21.2.4-0ubuntu2.1",
      "released": "2023-01-26T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-compute",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-compute 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-compute-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-compute",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:21.2.4-0ubuntu2.1",
      "fix": "nova-compute 2:21.2.4-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nova-compute-2-21.2.4-0ubuntu2.1",
      "released": "2023-01-26T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-compute-kvm",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-compute-kvm 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-compute-kvm-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-compute-kvm",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:21.2.4-0ubuntu2.1",
      "fix": "nova-compute-kvm 2:21.2.4-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nova-compute-kvm-2-21.2.4-0ubuntu2.1",
      "released": "2023-01-26T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-compute-libvirt",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-compute-libvirt 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-compute-libvirt-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-compute-libvirt",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:21.2.4-0ubuntu2.1",
      "fix": "nova-compute-libvirt 2:21.2.4-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nova-compute-libvirt-2-21.2.4-0ubuntu2.1",
      "released": "2023-01-26T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-compute-lxc",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-compute-lxc 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-compute-lxc-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-compute-lxc",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:21.2.4-0ubuntu2.1",
      "fix": "nova-compute-lxc 2:21.2.4-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nova-compute-lxc-2-21.2.4-0ubuntu2.1",
      "released": "2023-01-26T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-compute-qemu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-compute-qemu 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-compute-qemu-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-compute-qemu",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:21.2.4-0ubuntu2.1",
      "fix": "nova-compute-qemu 2:21.2.4-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nova-compute-qemu-2-21.2.4-0ubuntu2.1",
      "released": "2023-01-26T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-compute-vmware",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-compute-vmware 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-compute-vmware-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-compute-vmware",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:21.2.4-0ubuntu2.1",
      "fix": "nova-compute-vmware 2:21.2.4-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nova-compute-vmware-2-21.2.4-0ubuntu2.1",
      "released": "2023-01-26T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-compute-xen",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-compute-xen 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-compute-xen-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-compute-xen",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:21.2.4-0ubuntu2.1",
      "fix": "nova-compute-xen 2:21.2.4-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nova-compute-xen-2-21.2.4-0ubuntu2.1",
      "released": "2023-01-26T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-conductor",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-conductor 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-conductor-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-conductor",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:21.2.4-0ubuntu2.1",
      "fix": "nova-conductor 2:21.2.4-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nova-conductor-2-21.2.4-0ubuntu2.1",
      "released": "2023-01-26T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-console",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-console 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-console-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-consoleauth",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-consoleauth 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-consoleauth-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-network",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-network 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-network-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-novncproxy",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-novncproxy 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-novncproxy-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-novncproxy",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:21.2.4-0ubuntu2.1",
      "fix": "nova-novncproxy 2:21.2.4-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nova-novncproxy-2-21.2.4-0ubuntu2.1",
      "released": "2023-01-26T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-placement-api",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-placement-api 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-placement-api-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-scheduler",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-scheduler 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-scheduler-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-scheduler",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:21.2.4-0ubuntu2.1",
      "fix": "nova-scheduler 2:21.2.4-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nova-scheduler-2-21.2.4-0ubuntu2.1",
      "released": "2023-01-26T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-serialproxy",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-serialproxy 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-serialproxy-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-serialproxy",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:21.2.4-0ubuntu2.1",
      "fix": "nova-serialproxy 2:21.2.4-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nova-serialproxy-2-21.2.4-0ubuntu2.1",
      "released": "2023-01-26T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-spiceproxy",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-spiceproxy 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-spiceproxy-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-spiceproxy",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:21.2.4-0ubuntu2.1",
      "fix": "nova-spiceproxy 2:21.2.4-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nova-spiceproxy-2-21.2.4-0ubuntu2.1",
      "released": "2023-01-26T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-volume",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-volume 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-volume-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-volume",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:21.2.4-0ubuntu2.1",
      "fix": "nova-volume 2:21.2.4-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nova-volume-2-21.2.4-0ubuntu2.1",
      "released": "2023-01-26T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nova-xvpvncproxy",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "nova-xvpvncproxy 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nova-xvpvncproxy-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python-nova",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:17.0.13-0ubuntu5.3",
      "fix": "python-nova 2:17.0.13-0ubuntu5.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python-nova-2-17.0.13-0ubuntu5.3",
      "released": "2022-03-02T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-nova",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:21.2.4-0ubuntu2.1",
      "fix": "python3-nova 2:21.2.4-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-python3-nova-2-21.2.4-0ubuntu2.1",
      "released": "2023-01-26T16:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}