Race-Condition Flaw in OpenStack Neutron by Red Hat

CVE-2017-7543

Summary

A race-condition vulnerability exists in OpenStack Neutron that can disable security groups during a minor overcloud update. This flaw leads to the reset of critical parameters, allowing unauthorized access to tenant virtual machines and network resources. Attackers could exploit this condition to compromise the security of cloud environments, particularly when these updates are implemented, increasing the need for vigilance and prompt remediation measures.

References