The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "neutron-common", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-dhcp-agent", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-l3-agent", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-lbaas-agent", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-metadata-agent", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-metering-agent", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-bigswitch", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-bigswitch-agent", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-brocade", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-cisco", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-hyperv", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-ibm", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-ibm-agent", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-linuxbridge", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-linuxbridge-agent", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-metaplugin", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-metering-agent", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-midonet", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-ml2", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-mlnx", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-mlnx-agent", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-nec", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-nec-agent", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-nicira", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-oneconvergence", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-oneconvergence-agent", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-openflow-agent", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-openvswitch", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-openvswitch-agent", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-plumgrid", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-ryu", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-ryu-agent", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-vmware", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-plugin-vpn-agent", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-server", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "neutron-vpn-agent", "binary_version": "1:2014.1-0ubuntu1.3" }, { "binary_name": "python-neutron", "binary_version": "1:2014.1-0ubuntu1.3" } ] }