CVE-2015-3221

Published: 26 August 2015

OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 (kilo), when using the IPTables firewall driver, allows remote authenticated users to cause a denial of service (L2 agent crash) by adding an address pair that is rejected by the ipset tool.

Priority

Low

Status

Package Release Status
neutron
Launchpad, Ubuntu, Debian
Upstream
Released (2015.1.0+2015.06.24.git61.bdf194a0e1-1)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist
(trusty was not-affected [code not present])
Patches:
Upstream: https://review.openstack.org/194696 (juno)
Upstream: https://review.openstack.org/194697 (kilo)
Upstream: https://review.openstack.org/194695 (liberty)