GitHub Advisoryadvisory · PyPI

GHSA-hhpj-6pj7-wpx5 OpenStack Neutron Race condition vulnerability

LOW Published 2022-05-17 Modified 2024-05-14 Official page ↗
Aliases
CVE-2015-5240
Ecosystem
PyPI
Packages
neutron
Severity
Low
Weaknesses
CWE-362
Reviewed
2024-05-14

Affected packages

• PyPI neutron: < 7.0.0 → fixed in 7.0.0

Description

Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API, allows remote authenticated users to bypass IP anti-spoofing controls by changing the device owner of a port to start with network: before the security group rules are applied.

Related

Alias · CVE (1)

  • CVE-2015-5240 Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API,… vulnerability

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References