REDHAT-BUG-1064163
First published: Wed Feb 12 2014(Updated: )
Yair Fried of Red Hat reports: A regression from Grizzly and Havana exists in the PackStack rules deployed to Neutron. Specifically when default security groups are enabled they are not enforced, allowing connectivity to systems that should be blocked by the security groups. External references: <a href="https://review.openstack.org/#/c/62702/">https://review.openstack.org/#/c/62702/</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Packstack | ||
| Neutron |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of REDHAT-BUG-1064163?
The severity of REDHAT-BUG-1064163 is classified as a high-risk vulnerability due to the potential exposure of systems to unwanted connectivity.
How do I fix REDHAT-BUG-1064163?
To mitigate REDHAT-BUG-1064163, ensure that security group settings are correctly configured and enforced within your OpenStack Neutron deployment.
What systems are affected by REDHAT-BUG-1064163?
The systems affected by REDHAT-BUG-1064163 include Red Hat PackStack and OpenStack Neutron.
Can REDHAT-BUG-1064163 lead to unauthorized access?
Yes, REDHAT-BUG-1064163 can lead to unauthorized access as it allows connectivity that should be restricted by default security groups.
Is there a workaround for REDHAT-BUG-1064163?
A temporary workaround for REDHAT-BUG-1064163 is to manually enforce security group rules until an official patch is applied.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2014-0071
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/red hat packstack
- vendor/openstack
- canonical/neutron