networking-bagpipe (8.0.1), networking-baremetal (1.0.1) +1 more potentially affected by CVE-2022-3277 via neutron (12.1.1)

neutron PYPI version 12.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bagpipe 8.0.1 - networking-baremetal 1.0.1 - networking-mlnx 12.4.0 Source cves: CVE-2022-3277 Source advisory: OSV:PYSEC-2026-855...

networking-bigswitch (>=15.0.0, <=15.0.2) potentially affected by CVE-2022-3277 via neutron (15.3.4)

neutron PYPI version 15.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bigswitch =15.0.0, =15.0.2 Source cves: CVE-2022-3277 Source advisory: OSV:PYSEC-2026-855...

RHEL 9 : Red Hat OpenStack Platform 17.0 (openstack-neutron) (RHSA-2023:0275)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:0275 advisory. OpenStack Networking neutron is a virtual network service for OpenStack. Just as OpenStack Compute nova provides an API to dynamically request and...

RHEL 8 : Red Hat OpenStack Platform 16.2 (openstack-neutron) (RHSA-2023:4283)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4283 advisory. OpenStack Networking neutron is a virtual network service for OpenStack. Just as OpenStack Compute nova provides an API to dynamically request and...

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (openstack-neutron) security update

An update for openstack-neutron is now available for Red Hat OpenStack Platform 16.2 Train. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

openstack-neutron: unrestricted creation of security groups (fix for CVE-2022-3277)

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significa...

CVE-2023-3637 Openstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277)

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significa...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : OpenStack Neutron vulnerabilities (USN-6067-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6067-1 advisory. David Sinquin discovered that OpenStack Neutron incorrectly handled the default Open vSwitch firewall rules. An attacker could...

Ubuntu: Security Advisory (USN-6067-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6067-1: OpenStack Neutron vulnerabilities

David Sinquin discovered that OpenStack Neutron incorrectly handled the default Open vSwitch firewall rules. An attacker could possibly use this issue to impersonate the IPv6 addresses of other systems on the network. This issue only affected Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. CVE-2021-20267...

networking-bigswitch (>=15.0.0, <=15.0.2) potentially affected by CVE-2022-3277 via neutron (15.3.4)

neutron PYPI version 15.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bigswitch =15.0.0, =15.0.2 Source cves: CVE-2022-3277 Source advisory: OSV:GHSA-W446-H7VG-WV3P...

networking-odl (13.0.1), networking-ovn (5.1.0) +3 more potentially affected by CVE-2022-3277 via neutron (13.0.7)

neutron PYPI version 13.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-odl 13.0.1 - networking-ovn 5.1.0 - neutron-dynamic-routing 13.1.0 - neutron-fwaas =13.0.2, =13.0.3 - neutron-vpnaas 13.0.2 Source cve...

networking-odl (14.0.1), networking-ovn (6.0.1) +2 more potentially affected by CVE-2022-3277 via neutron (14.4.2)

neutron PYPI version 14.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-odl 14.0.1 - networking-ovn 6.0.1 - neutron-fwaas 14.0.1 - neutron-vpnaas 14.0.1 Source cves: CVE-2022-3277 Source advisory:...

networking-bagpipe (8.0.1), networking-baremetal (1.0.1) +1 more potentially affected by CVE-2022-3277 via neutron (12.1.1)

neutron PYPI version 12.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bagpipe 8.0.1 - networking-baremetal 1.0.1 - networking-mlnx 12.4.0 Source cves: CVE-2022-3277 Source advisory: OSV:GHSA-W446-H7VG-WV3...

CVE-2022-3277

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significa...

CVE-2022-3277

CVE-2022-3277 affects OpenStack Neutron; an uncontrolled resource consumption flaw allows a remote authenticated user to query security groups for an invalid project, creating resources unconstrained by quotas and potentially causing a denial of service. The issue is tied to the OpenStack Neutron...

CVE-2022-3277

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significa...

RHEL 8 : Red Hat OpenStack Platform 16.2.4 (openstack-neutron) (RHSA-2022:8855)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8855 advisory. OpenStack Networking neutron is a virtual network service for OpenStack. Just as OpenStack Compute nova provides an API to dynamically request and...

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (openstack-neutron) security update

An update for openstack-neutron is now available for Red Hat OpenStack Platform 16.1.9 Train for Red Hat Enterprise Linux RHEL 8.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.4 (openstack-neutron) security update

An update for openstack-neutron is now available for Red Hat OpenStack Platform 16.2.4 Train for Red Hat Enterprise Linux RHEL 8.4. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...