GitHub Advisoryadvisory · PyPI

GHSA-wf44-4mgj-rwvx OpenStack Neutron Improper Input Validation vulnerability

MEDIUM Published 2022-05-14 Modified 2026-08-07 Official page ↗
Aliases
CVE-2015-3221
Ecosystem
PyPI
Packages
neutron
Severity
Moderate
Weaknesses
CWE-20
Reviewed
2023-02-08

Affected packages

• PyPI neutron: >= 2000, < 2014.2.4 → fixed in 2014.2.4 • PyPI neutron: >= 2015.1.0, < 2015.1.1 → fixed in 2015.1.1

Description

OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 (kilo), when using the IPTables firewall driver, allows remote authenticated users to cause a denial of service (L2 agent crash) by adding an address pair that is rejected by the ipset tool.

Related

Alias · CVE (1)

  • CVE-2015-3221 OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 (kilo), when using the IPTables firewall driver, allows remote… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References