Skip to content
OpenAdvisories
Unscored RHSA-2015:1680 1 CVE

Red Hat Security Advisory: openstack-neutron security and bug fix update

Published Sep 15, 2024 · Updated Aug 1, 2026

Fixed packages 26

ReleasePackageFixed in
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-bigswitch 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-brocade 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-cisco 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-common 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-embrane 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-hyperv 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-ibm 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-linuxbridge 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-mellanox 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-metaplugin 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-metering-agent 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-midonet 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-ml2 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-nec 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-nuage 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-ofagent 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-oneconvergence-nvsd 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-opencontrail 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-openvswitch 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-plumgrid 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-ryu 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-sriov-nic-agent 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-vmware 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-neutron-vpn-agent 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 python-neutron 0:2014.2.3-9.el7ost

Vulnerabilities 1

  • Medium —
    CVE-2015-3221 Public exploit EPSS 11%

    OpenStack Neutron Improper Input Validation vulnerability

    OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 (kilo), when using the IPTables firewall driver, allows remote authenticated users to cause a denial of service (L2 agent crash) by adding an address pair that is rejected by the ipset tool.

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1208002
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1227635
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1232284
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1250056
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1680.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-3221
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3221
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3221