CVE-2015-3221

Currently unrated 🤨

Key Information

Vendor: Openstack
Status: Neutron
Vendor: CVE Published:; 26 August 2015

Summary

OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 (kilo), when using the IPTables firewall driver, allows remote authenticated users to cause a denial of service (L2 agent crash) by adding an address pair that is rejected by the ipset tool.

References

http://www.securityfocus.com/bid/75368

vdb-entryx_refsource_BID

http://lists.openstack.org/pipermail/openstack-announce/2...

mailing-listx_refsource_MLIST

https://bugs.launchpad.net/neutron/+bug/1461054

x_refsource_CONFIRM

EPSS Score

2% chance of being exploited in the next 30 days.

Timeline

Vulnerability published
Aug 26, 2015
Vulnerability Reserved
Apr 10, 2015

Collectors

NVD DatabaseMitre Database