OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (crash or long firewall rule updates) by creating a large number of allowed address pairs.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2014:1078 advisory.

    OpenStack Networking (Neutron) is a pluggable, scalable, and API-driven     system that provisions networking services to virtual machines. Its main     function is to manage connectivity to and from virtual machines.

    A denial of service flaw was found in Neutron's handling of allowed address     pairs. There was no enforced quota on the amount of allowed address pairs,     possibly allowing a sufficiently authorized user to create such a large     number of firewall rules as to impact performance, or potentially render a     compute node unusable. (CVE-2014-3555)

    Red Hat would like to thank the OpenStack project for reporting this issue.
    Upstream acknowledges Liping Mao from Cisco as the original reporter.

    All openstack-neutron users are advised to upgrade to these updated     packages, which correct this issue.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2321-1 advisory.

    Liping Mao discovered that OpenStack Neutron did not properly handle requests for a large number of     allowed address pairs. A remote authenticated attacker could exploit this to cause a denial of service.
    (CVE-2014-3555)

    Zhi Kun Liu discovered that OpenStack Neutron incorrectly filtered certain tokens. An attacker could     possibly use this issue to obtain authentication tokens used in REST requests. (CVE-2014-4615)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security fix for CVE-2014-3555 Moved python files back to python-neutron to avoid breaking hidden dependencies, rhbz#1120146.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
234377	RHEL 6 : openstack-neutron (RHSA-2014:1078)	Nessus	Red Hat Local Security Checks	medium
77321	Ubuntu 14.04 LTS : OpenStack Neutron vulnerabilities (USN-2321-1)	Nessus	Ubuntu Local Security Checks	medium
76980	Fedora 20 : openstack-neutron-2013.2.3-13.fc20 (2014-8743)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2014-3555

medium

Tenable Plugins

medium

medium

medium