CVE-2015-3221

CVE-2015-3221 affects OpenStack Neutron (IPTables driver) where remote authenticated users can cause a denial of service (L2 agent crash) by adding an address pair that is rejected by ipset. Connected advisories (RHSA-2015:1680; SUSE-SU-2015:1890-1 and related SUSE/SUSE-SU advisories) indicate Ne...

CVE-2015-5240

CVE-2015-5240 is a race-condition flaw in OpenStack Neutron prior to 2014.2.4 and 2015.1 prior to 2015.1.2 that affects the ML2 plugin or the security groups AMQP API. An authenticated user could bypass IP anti-spoofing/firewall checks by changing the owner of a port to start with network: after ...

CVE-2014-8153

The CVE-2014-8153 entry affects the L3 agent in OpenStack Neutron 2014.2.x before 2014.2.2 when using radvd 2.0+. A remote authenticated user can cause a denial of service (blocked router update processing) by creating eight routers and assigning an IPv6 non-provider subnet to each. Connected adv...