The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-common" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-dhcp-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-l3-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-lbaas-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-metadata-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-metering-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-bigswitch" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-bigswitch-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-brocade" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-cisco" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-hyperv" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-ibm" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-ibm-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-linuxbridge" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-linuxbridge-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-metaplugin" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-metering-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-midonet" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-ml2" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-mlnx" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-mlnx-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-nec" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-nec-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-nicira" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-oneconvergence" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-oneconvergence-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-openflow-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-openvswitch" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-openvswitch-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-plumgrid" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-ryu" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-ryu-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-vmware" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-plugin-vpn-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-server" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "neutron-vpn-agent" }, { "binary_version": "1:2014.1-0ubuntu1.3", "binary_name": "python-neutron" } ] }