CVE-2015-3221
Fixed in a distro release EPSS 11%
OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 (kilo), when using the IPTables firewall driver, allows remote authenticated users to cause a denial of service (L2 agent crash) by adding an address pair that is rejected by the ipset tool.
Products: openstack neutron
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | neutron | 2014.2.4 |
| PyPI | neutron | 2015.1.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | neutron | 2015.1.0+2015.06.24.git61.bdf194a0e1-1 |
| Debian 13 | neutron | 2015.1.0+2015.06.24.git61.bdf194a0e1-1 |
| Debian 14 | neutron | 2015.1.0+2015.06.24.git61.bdf194a0e1-1 |
| Red Hat openstack 6 | openstack-neutron | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-bigswitch | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-brocade | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-cisco | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-common | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-embrane | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-hyperv | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-ibm | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-linuxbridge | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-mellanox | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-metaplugin | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-metering-agent | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-midonet | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-ml2 | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-nec | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-nuage | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-ofagent | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-oneconvergence-nvsd | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-opencontrail | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-openvswitch | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-plumgrid | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-ryu | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-sriov-nic-agent | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-vmware | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | openstack-neutron-vpn-agent | 0:2014.2.3-9.el7ost |
| Red Hat openstack 6 | python-neutron | 0:2014.2.3-9.el7ost |
| SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 | openstack-neutron | 2014.2.4~a0~dev103-10.3 |
| SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 | openstack-nova | 2014.2.4~a0~dev80-14.1 |
| SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 | python-python-memcached | 1.54-2.1 |
| SUSE OpenStack Cloud 5 | crowbar-barclamp-neutron | 1.9+git.1443859419.95e948a-12.2 |
| SUSE OpenStack Cloud 5 | openstack-neutron | 2014.2.4~a0~dev103-16.2 |
| SUSE OpenStack Cloud 5 | openstack-neutron-doc | 2014.2.4~a0~dev103-16.4 |