The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootwrap, which allows remote attackers to gain privileges via a crafted configuration file.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-common" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-dhcp-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-l3-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-lbaas-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-metadata-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-metering-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-bigswitch" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-bigswitch-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-brocade" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-cisco" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-hyperv" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-ibm" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-ibm-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-linuxbridge" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-linuxbridge-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-metaplugin" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-metering-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-midonet" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-ml2" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-mlnx" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-mlnx-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-nec" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-nec-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-nicira" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-oneconvergence" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-oneconvergence-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-openflow-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-openvswitch" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-openvswitch-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-plumgrid" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-ryu" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-ryu-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-vmware" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-vpn-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-server" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-vpn-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "python-neutron" } ] }