CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
52.0%
David Sinquin discovered that OpenStack Neutron incorrectly handled the
default Open vSwitch firewall rules. An attacker could possibly use this
issue to impersonate the IPv6 addresses of other systems on the network.
This issue only affected Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.
(CVE-2021-20267)
Jake Yip and Justin Mammarella discovered that OpenStack Neutron
incorrectly handled the linuxbridge driver when ebtables-nft is being
used. An attacker could possibly use this issue to impersonate the hardware
addresss of other systems on the network. This issue only affected Ubuntu
18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-38598)
Pavel Toporkov discovered that OpenStack Neutron incorrectly handled
extra_dhcp_opts values. An attacker could possibly use this issue to
reconfigure dnsmasq. This issue only affected Ubuntu 18.04 LTS, and Ubuntu
20.04 LTS. (CVE-2021-40085)
Slawek Kaplonski discovered that OpenStack Neutron incorrectly handled the
routes middleware. An attacker could possibly use this issue to cause the
API worker to consume memory, leading to a denial of service. This issue
only affected Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-40797)
It was discovered that OpenStack Neutron incorrectly handled certain
queries. A remote authenticated user could possibly use this issue to cause
resource consumption, leading to a denial of service. (CVE-2022-3277)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 22.04 | noarch | python3-neutron | < 2:20.3.0-0ubuntu1.1 | UNKNOWN |
Ubuntu | 22.04 | noarch | neutron-common | < 2:20.3.0-0ubuntu1.1 | UNKNOWN |
Ubuntu | 22.04 | noarch | neutron-dhcp-agent | < 2:20.3.0-0ubuntu1.1 | UNKNOWN |
Ubuntu | 22.04 | noarch | neutron-l3-agent | < 2:20.3.0-0ubuntu1.1 | UNKNOWN |
Ubuntu | 22.04 | noarch | neutron-linuxbridge-agent | < 2:20.3.0-0ubuntu1.1 | UNKNOWN |
Ubuntu | 22.04 | noarch | neutron-macvtap-agent | < 2:20.3.0-0ubuntu1.1 | UNKNOWN |
Ubuntu | 22.04 | noarch | neutron-metadata-agent | < 2:20.3.0-0ubuntu1.1 | UNKNOWN |
Ubuntu | 22.04 | noarch | neutron-metering-agent | < 2:20.3.0-0ubuntu1.1 | UNKNOWN |
Ubuntu | 22.04 | noarch | neutron-openvswitch-agent | < 2:20.3.0-0ubuntu1.1 | UNKNOWN |
Ubuntu | 22.04 | noarch | neutron-ovn-metadata-agent | < 2:20.3.0-0ubuntu1.1 | UNKNOWN |
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
52.0%