CVE search results

11 – 20 of 30 results

Detailed view

Sort by:

CVE-2018-14635

Negligible priority

Some fixes available 1 of 2

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address,...

1 affected package

neutron

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
neutron	Not affected	Not affected	Not affected	Fixed	Vulnerable

CVE-2017-7543

Medium priority

Not affected

A race-condition flaw was discovered in openstack-neutron before 7.2.0-12.1, 8.x before 8.3.0-11.1, 9.x before 9.3.1-2.1, and 10.x before 10.0.2-1.1, where, following a minor overcloud update, neutron security groups were...

1 affected package

neutron

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
neutron	—	—	—	—	Not affected

CVE-2016-5363

Low priority

Ignored

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended MAC-spoofing protection mechanism and consequently cause a denial of service or intercept...

1 affected package

neutron

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
neutron	—	—	—	Not affected	Not affected

CVE-2016-5362

Low priority

Ignored

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended DHCP-spoofing protection mechanism and consequently cause a denial of service or intercept network...

1 affected package

neutron

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
neutron	—	—	—	Not affected	Not affected

CVE-2015-8914

Low priority

Ignored

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network...

1 affected package

neutron

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
neutron	—	—	—	Not affected	Not affected

CVE-2015-5240

Medium priority

Not affected

Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API, allows remote authenticated users to bypass IP anti-spoofing controls by changing the...

1 affected package

neutron

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
neutron	—	—	—	—	—

CVE-2015-3221

Low priority

Ignored

OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 (kilo), when using the IPTables firewall driver, allows remote authenticated users to cause a denial of service (L2 agent crash) by adding an address pair that...

1 affected package

neutron

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
neutron	—	—	—	—	—

CVE-2014-8153

Medium priority

Ignored

The L3 agent in OpenStack Neutron 2014.2.x before 2014.2.2, when using radvd 2.0+, allows remote authenticated users to cause a denial of service (blocked router update processing) by creating eight routers and assigning an ipv6...

1 affected package

neutron

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
neutron	—	—	—	—	—

CVE-2014-7821

Low priority

Fixed

OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (crash) via a crafted dns_nameservers value in the DNS configuration.

1 affected package

neutron

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
neutron	—	—	—	—	—

CVE-2014-3632

Medium priority

Not in release

The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allows remote attackers to gain...

1 affected package

neutron

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
neutron	—	—	—	—	—

Export to JSON

Results by page:

Search CVE reports