Red Hat Security AdvisoryRHSA-2014:0899
openstack-neutron security, bug fix, and enhancement update
Released 2014-07-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 4.0 openstack-neutron-2013.2.3-14.el6ost, openstack-neutron-bigswitch-2013.2.3-14.el6ost, openstack-neutron-brocade-2013.2.3-14.el6ost +15
Fixes 2 records
Priority MEDIUM 44
The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, w…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.02999 · Published 2014-04-28 · Fixed CWE-264
Priority LOW 20
The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an IPv6 priva…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.01659 · Published 2014-07-11 · Partial fix CWE-264