REDHAT-BUG-1258458: Medium severity neutron vulnerability
It was reported that a vulnerability was found in Neutron. By changing the device owner of an instance's port right after it is created, an authenticated user may prevent application of firewall rules and so avoid IP anti-spoofing controls. All Neutron setups using the ML2 plugin or a plugin that relies on the security groups AMQP API are affected. All Neutron setups using the ML2 plugin or a plugin that relies on the security groups AMQP API are affected.
Vulnerability affects versions through 2014.2.3 and 2015.1 versions through 2015.1.1
Acknowledgements:
Red Hat would like to thank the OpenStack project for reporting this issue. Upstream acknowledges Kevin Benton from Mirantis as the original reporter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1258458?
The severity of REDHAT-BUG-1258458 has been classified as high due to the potential bypass of firewall rules and IP anti-spoofing defenses.
How do I fix REDHAT-BUG-1258458?
To fix REDHAT-BUG-1258458, update Neutron to a version later than 2015.1.1 or ensure proper access controls are in place to restrict user permissions.
Who is affected by REDHAT-BUG-1258458?
REDHAT-BUG-1258458 affects all installations of OpenStack Neutron using the ML2 plugin or similar plugins between the specified versions.
What are the implications of REDHAT-BUG-1258458?
The implications of REDHAT-BUG-1258458 include an increased risk of unauthorized access and potential denial of service due to misconfigured firewall settings.
Is there a workaround for REDHAT-BUG-1258458?
A potential workaround for REDHAT-BUG-1258458 is to implement strict user role management to limit the ability to change device ownership.