What is RHSA-2020:3708?

RHSA-2020:3708 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: openstack-nova security update

Which CVE IDs does RHSA-2020:3708 cover?

RHSA-2020:3708 covers the following CVE IDs: CVE-2020-17376. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2020:3708?

RHSA-2020:3708 has a CVSS v3 base score of 8.3, published by Red Hat Product Security.

Which products are affected by RHSA-2020:3708?

RHSA-2020:3708 affects 36 products, including: Red Hat OpenStack Platform 13.0; Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server; openstack-nova-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0; openstack-nova-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server; openstack-nova-1:17.0.13-24.el7ost.src as a component of Red Hat OpenStack Platform 13.0; and others — see the full list on the advisory page.

RHSA-2020:3708HighCVSS 8.3

Red Hat Security Advisory: openstack-nova security update

Vendor

Red Hat Product Security

Published

September 10, 2020

Last Modified

October 8, 2026

🔗 CVE IDs covered (1)

CVE-2020-17376 →

📋 Description

CVE-2020-17376 — openstack-nova: Soft reboot after live-migration reverts instance to original source domain XML

🎯 Affected products36

Red Hat OpenStack Platform 13.0
Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
openstack-nova-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0
openstack-nova-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
openstack-nova-1:17.0.13-24.el7ost.src as a component of Red Hat OpenStack Platform 13.0
openstack-nova-1:17.0.13-24.el7ost.src as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
openstack-nova-api-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0
openstack-nova-api-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
openstack-nova-cells-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0
openstack-nova-cells-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
openstack-nova-common-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0
openstack-nova-common-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
openstack-nova-compute-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0
openstack-nova-compute-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
openstack-nova-conductor-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0
openstack-nova-conductor-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
openstack-nova-console-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0
openstack-nova-console-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
openstack-nova-migration-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0
openstack-nova-migration-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
openstack-nova-network-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0
openstack-nova-network-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
openstack-nova-novncproxy-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0
openstack-nova-novncproxy-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
openstack-nova-placement-api-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0
openstack-nova-placement-api-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
openstack-nova-scheduler-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0
openstack-nova-scheduler-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
openstack-nova-serialproxy-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0
openstack-nova-serialproxy-1:17.0.13-24.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
+6 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Public clouds using non-default configurations (allowing untrusted users to initiate live migrations) face significant additional risk. If it is not possible to immediately apply patches, a temporary policy change is recommended: disable soft reboots by setting wait_soft_reboot_seconds to zero. This effectively forces any soft reboots to instead be overridden as a hard reboot. Find more information in Nova's documentation https://docs.openstack.org/nova/ussuri/configuration/config.html Deployments which use unique device paths for each cinder volume face an extremely low risk of being affected by this flaw.

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products36

✅ Remediation

🔗 References (4)