Red Hat Security AdvisoryRHSA-2015:1909
openstack-neutron security and bug fix update
Released 2015-10-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6 openstack-neutron-2014.1.5-4.el6ost, openstack-neutron-bigswitch-2014.1.5-4.el6ost, openstack-neutron-brocade-2014.1.5-4.el6ost +20
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 openstack-neutron-2014.1.5-4.el7ost, openstack-neutron-bigswitch-2014.1.5-4.el7ost, openstack-neutron-brocade-2014.1.5-4.el7ost +20
- Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7 openstack-neutron-2014.2.3-19.el7ost, openstack-neutron-bigswitch-2014.2.3-19.el7ost, openstack-neutron-brocade-2014.2.3-19.el7ost +23
- Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7 openstack-neutron-2015.1.1-7.el7ost, openstack-neutron-bigswitch-2015.1.1-7.el7ost, openstack-neutron-brocade-2015.1.1-7.el7ost +22
Fixes 1 record
Priority LOW 19
Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API, allows remote authenticated users to bypass IP anti-spoofing controls by changing…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.00976 · Published 2015-10-27 · Fixed in 7.0.0 CWE-362
