CVE-2015-5240
Fixed in a distro release EPSS <1%
Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API, allows remote authenticated users to bypass IP anti-spoofing controls by changing the device owner of a port to start with network: before the security group rules are applied.
Products: openstack neutron
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | neutron | 7.0.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | neutron | 1:7.0.0-1 |
| Debian 13 | neutron | 1:7.0.0-1 |
| Debian 14 | neutron | 1:7.0.0-1 |
| Red Hat openstack 5 | openstack-neutron | 0:2014.1.5-4.el7ost |
| Red Hat openstack 5 | openstack-neutron | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-bigswitch | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-bigswitch | 0:2014.1.5-4.el7ost |
| Red Hat openstack 5 | openstack-neutron-brocade | 0:2014.1.5-4.el7ost |
| Red Hat openstack 5 | openstack-neutron-brocade | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-cisco | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-cisco | 0:2014.1.5-4.el7ost |
| Red Hat openstack 5 | openstack-neutron-embrane | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-embrane | 0:2014.1.5-4.el7ost |
| Red Hat openstack 5 | openstack-neutron-hyperv | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-hyperv | 0:2014.1.5-4.el7ost |
| Red Hat openstack 5 | openstack-neutron-ibm | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-ibm | 0:2014.1.5-4.el7ost |
| Red Hat openstack 5 | openstack-neutron-linuxbridge | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-linuxbridge | 0:2014.1.5-4.el7ost |
| Red Hat openstack 5 | openstack-neutron-mellanox | 0:2014.1.5-4.el7ost |
| Red Hat openstack 5 | openstack-neutron-mellanox | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-metaplugin | 0:2014.1.5-4.el7ost |
| Red Hat openstack 5 | openstack-neutron-metaplugin | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-metering-agent | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-metering-agent | 0:2014.1.5-4.el7ost |
| Red Hat openstack 5 | openstack-neutron-midonet | 0:2014.1.5-4.el7ost |
| Red Hat openstack 5 | openstack-neutron-midonet | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-ml2 | 0:2014.1.5-4.el7ost |
| Red Hat openstack 5 | openstack-neutron-ml2 | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-nec | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-nec | 0:2014.1.5-4.el7ost |
| Red Hat openstack 5 | openstack-neutron-nuage | 0:2014.1.5-4.el7ost |
| Red Hat openstack 5 | openstack-neutron-nuage | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-ofagent | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-ofagent | 0:2014.1.5-4.el7ost |
| Red Hat openstack 5 | openstack-neutron-oneconvergence-nvsd | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-oneconvergence-nvsd | 0:2014.1.5-4.el7ost |
| Red Hat openstack 5 | openstack-neutron-openvswitch | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-openvswitch | 0:2014.1.5-4.el7ost |
| Red Hat openstack 5 | openstack-neutron-plumgrid | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-plumgrid | 0:2014.1.5-4.el7ost |
| Red Hat openstack 5 | openstack-neutron-ryu | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-ryu | 0:2014.1.5-4.el7ost |
| Red Hat openstack 5 | openstack-neutron-vmware | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-vmware | 0:2014.1.5-4.el7ost |
| Red Hat openstack 5 | openstack-neutron-vpn-agent | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-vpn-agent | 0:2014.1.5-4.el7ost |
| Red Hat openstack 5 | python-neutron | 0:2014.1.5-4.el6ost |
| Red Hat openstack 5 | python-neutron | 0:2014.1.5-4.el7ost |
| Red Hat openstack 6 | openstack-neutron | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-bigswitch | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-brocade | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-cisco | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-common | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-embrane | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-hyperv | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-ibm | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-linuxbridge | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-mellanox | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-metaplugin | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-metering-agent | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-midonet | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-ml2 | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-nec | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-nuage | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-ofagent | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-oneconvergence-nvsd | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-opencontrail | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-openvswitch | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-plumgrid | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-ryu | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-sriov-nic-agent | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-vmware | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | openstack-neutron-vpn-agent | 0:2014.2.3-19.el7ost |
| Red Hat openstack 6 | python-neutron | 0:2014.2.3-19.el7ost |
| Red Hat openstack 7 | openstack-neutron | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | openstack-neutron-bigswitch | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | openstack-neutron-brocade | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | openstack-neutron-cisco | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | openstack-neutron-common | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | openstack-neutron-embrane | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | openstack-neutron-ibm | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | openstack-neutron-linuxbridge | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | openstack-neutron-mellanox | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | openstack-neutron-metaplugin | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | openstack-neutron-metering-agent | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | openstack-neutron-midonet | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | openstack-neutron-ml2 | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | openstack-neutron-nec | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | openstack-neutron-nuage | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | openstack-neutron-ofagent | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | openstack-neutron-oneconvergence-nvsd | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | openstack-neutron-opencontrail | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | openstack-neutron-openvswitch | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | openstack-neutron-ovsvapp | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | openstack-neutron-plumgrid | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | openstack-neutron-sriov-nic-agent | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | openstack-neutron-vmware | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | python-neutron | 0:2015.1.1-7.el7ost |
| Red Hat openstack 7 | python-neutron-tests | 0:2015.1.1-7.el7ost |
| SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 | openstack-neutron | 2014.2.4~a0~dev103-10.3 |
| SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 | openstack-nova | 2014.2.4~a0~dev80-14.1 |
| SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 | python-python-memcached | 1.54-2.1 |
| SUSE OpenStack Cloud 5 | crowbar-barclamp-neutron | 1.9+git.1443859419.95e948a-12.2 |
| SUSE OpenStack Cloud 5 | openstack-neutron | 2014.2.4~a0~dev103-16.2 |
| SUSE OpenStack Cloud 5 | openstack-neutron-doc | 2014.2.4~a0~dev103-16.4 |