CVE-2015-3221
NoneCVSS
—
EPSS
11.4%
Published
Aug 26, 2015
CISA due date
—
The record
OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 (kilo), when using the IPTables firewall driver, allows remote authenticated users to cause a denial of service (L2 agent crash) by adding an address pair that is rejected by the ipset tool.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | neutron | 0 | 2014.2.4 |
| PyPI | neutron | 2015.1.0 | 2015.1.1 |
| Debian:11 | neutron | 0 | 2015.1.0+2015.06.24.git61.bdf194a0e1-1 |
| Debian:12 | neutron | 0 | 2015.1.0+2015.06.24.git61.bdf194a0e1-1 |
| Debian:13 | neutron | 0 | 2015.1.0+2015.06.24.git61.bdf194a0e1-1 |
| Red Hat:openstack:6::el7 | openstack-neutron | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-bigswitch | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-brocade | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-cisco | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-common | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-embrane | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-hyperv | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-ibm | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-linuxbridge | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-mellanox | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-metaplugin | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-metering-agent | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-midonet | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-ml2 | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-nec | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-nuage | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-ofagent | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-oneconvergence-nvsd | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-opencontrail | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-openvswitch | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-plumgrid | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-ryu | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-sriov-nic-agent | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-vmware | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | openstack-neutron-vpn-agent | 0 | 0:2014.2.3-9.el7ost |
| Red Hat:openstack:6::el7 | python-neutron | 0 | 0:2014.2.3-9.el7ost |
| SUSE:Cloud Compute Node for SUSE Linux Enterprise 12 5 | openstack-neutron | 0 | 2014.2.4~a0~dev103-10.3 |
| SUSE:Cloud Compute Node for SUSE Linux Enterprise 12 5 | openstack-nova | 0 | 2014.2.4~a0~dev80-14.1 |
| SUSE:Cloud Compute Node for SUSE Linux Enterprise 12 5 | python-python-memcached | 0 | 1.54-2.1 |
| SUSE:OpenStack Cloud 5 | crowbar-barclamp-neutron | 0 | 1.9+git.1443859419.95e948a-12.2 |
| SUSE:OpenStack Cloud 5 | openstack-neutron | 0 | 2014.2.4~a0~dev103-16.2 |
| SUSE:OpenStack Cloud 5 | openstack-neutron-doc | 0 | 2014.2.4~a0~dev103-16.4 |
| pypi | neutron | 2015.1.0 | No fix |
Related vulnerabilities
- CVE-2024-53916 In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID… Also affects neutron
- CVE-2023-3637 An uncontrolled resource consumption flaw was found in openstack-neutron. Also affects neutron
- CVE-2021-20267 A flaw was found in openstack-neutron's default Open vSwitch firewall rules. Also affects neutron
- CVE-2014-3555 OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows… Also affects neutron
- CVE-2014-6414 OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated… Also affects neutron
- CVE-2014-4615 The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer)… Also affects neutron
- CVE-2013-6433 The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does… Also affects neutron
- CVE-2015-3241 OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the… Also affects openstack-neutron