Security Rules Bypass

2019-03-1410:06:44

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.004 Low

EPSS

Percentile

73.5%

JSON

neutron is vulnerable to bypass of security rules. The vulnerability exists because it does not prevent addition of invalid rules in the iptables firewall module, such as setting a destination port for Virtual Router Redundancy Protocol (VRRP), resulting in an error that prevents computation of subsequent security rules.

CPENameOperatorVersion
neutronle12.0.5
neutronle13.0.2
neutronle11.0.6
neutronle14.0.0.0b2
neutronle10.0.7
openstack-neutroneq7.0.4__11.el7ost
openstack-neutroneq8.3.0__3.el7ost
openstack-neutroneq7.0.1__15.el7ost
openstack-neutroneq9.4.1__32.el7ost
openstack-neutroneq11.0.1__8.el7ost

Name	Operator	Version
neutron	le	12.0.5
neutron	le	13.0.2
neutron	le	11.0.6
neutron	le	14.0.0.0b2
neutron	le	10.0.7
openstack-neutron	eq	7.0.4__11.el7ost
openstack-neutron	eq	8.3.0__3.el7ost
openstack-neutron	eq	7.0.1__15.el7ost
openstack-neutron	eq	9.4.1__32.el7ost
openstack-neutron	eq	11.0.1__8.el7ost