USN-6067-1

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-6067-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-6067-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-6067-1

Related

Published

2023-05-10T11:30:08.483196Z

Modified

2023-05-10T11:30:08.483196Z

Summary

neutron vulnerabilities

Details

David Sinquin discovered that OpenStack Neutron incorrectly handled the default Open vSwitch firewall rules. An attacker could possibly use this issue to impersonate the IPv6 addresses of other systems on the network. This issue only affected Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-20267)

Jake Yip and Justin Mammarella discovered that OpenStack Neutron incorrectly handled the linuxbridge driver when ebtables-nft is being used. An attacker could possibly use this issue to impersonate the hardware addresss of other systems on the network. This issue only affected Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-38598)

Pavel Toporkov discovered that OpenStack Neutron incorrectly handled extradhcpopts values. An attacker could possibly use this issue to reconfigure dnsmasq. This issue only affected Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-40085)

Slawek Kaplonski discovered that OpenStack Neutron incorrectly handled the routes middleware. An attacker could possibly use this issue to cause the API worker to consume memory, leading to a denial of service. This issue only affected Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-40797)

It was discovered that OpenStack Neutron incorrectly handled certain queries. A remote authenticated user could possibly use this issue to cause resource consumption, leading to a denial of service. (CVE-2022-3277)

References

Affected packages

Ubuntu:18.04:LTS / neutron

Package

Name: neutron
Purl: pkg:deb/ubuntu/neutron?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:12.1.1-0ubuntu8.1

Affected versions

2:11.*

2:11.0.1-0ubuntu1

2:12.*

2:12.0.0~b1-0ubuntu1

2:12.0.0~b1-0ubuntu2

2:12.0.0~b2-0ubuntu1

2:12.0.0~b3-0ubuntu1

2:12.0.0~rc1-0ubuntu1

2:12.0.0~rc2-0ubuntu1

2:12.0.0-0ubuntu1

2:12.0.0-0ubuntu1.1

2:12.0.0-0ubuntu1.2

2:12.0.0-0ubuntu1.3

2:12.0.0-0ubuntu1.4

2:12.0.0-0ubuntu2

2:12.0.0-0ubuntu3

2:12.0.1-0ubuntu1

2:12.0.1-0ubuntu1.1

2:12.0.2-0ubuntu1

2:12.0.3-0ubuntu1

2:12.0.5-0ubuntu1

2:12.0.5-0ubuntu4

2:12.0.5-0ubuntu5

2:12.0.6-0ubuntu1

2:12.0.6-0ubuntu2

2:12.0.6-0ubuntu3

2:12.1.0-0ubuntu1

2:12.1.1-0ubuntu1

2:12.1.1-0ubuntu2

2:12.1.1-0ubuntu3

2:12.1.1-0ubuntu4

2:12.1.1-0ubuntu7

2:12.1.1-0ubuntu8

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-common"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-dhcp-agent"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-l3-agent"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-linuxbridge-agent"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-macvtap-agent"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-metadata-agent"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-metering-agent"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-openvswitch-agent"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-plugin-linuxbridge-agent"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-plugin-ml2"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-plugin-openvswitch-agent"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-plugin-sriov-agent"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-server"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-sriov-agent"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "python-neutron"
        }
    ]
}

Ubuntu:20.04:LTS / neutron

Package

Name: neutron
Purl: pkg:deb/ubuntu/neutron?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:16.4.2-0ubuntu6.2

Affected versions

2:15.*

2:15.0.0-0ubuntu1

2:16.*

2:16.0.0~b1~git2019121613.3e8abb9a8f-0ubuntu1

2:16.0.0~b2~git2020020712.d5b33ffc77-0ubuntu1

2:16.0.0~b2~git2020020712.d5b33ffc77-0ubuntu3

2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu1

2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu2

2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu3

2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu4

2:16.0.0~b3~git2020041013.e74c8f8c88-0ubuntu1

2:16.0.0~b3~git2020041516.5f42488a9a-0ubuntu1

2:16.0.0~b3~git2020041516.5f42488a9a-0ubuntu2

2:16.0.0-0ubuntu0.20.04.1

2:16.0.0-0ubuntu0.20.04.2

2:16.1.0-0ubuntu1

2:16.1.0-0ubuntu2

2:16.2.0-0ubuntu1

2:16.2.0-0ubuntu2

2:16.2.0-0ubuntu3

2:16.3.0-0ubuntu3

2:16.3.1-0ubuntu1

2:16.3.1-0ubuntu1.1

2:16.3.2-0ubuntu2

2:16.3.2-0ubuntu3

2:16.4.0-0ubuntu2

2:16.4.0-0ubuntu3

2:16.4.1-0ubuntu2

2:16.4.2-0ubuntu1

2:16.4.2-0ubuntu2

2:16.4.2-0ubuntu3

2:16.4.2-0ubuntu4

2:16.4.2-0ubuntu5

2:16.4.2-0ubuntu6

2:16.4.2-0ubuntu6.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-common"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-dhcp-agent"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-l3-agent"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-linuxbridge-agent"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-macvtap-agent"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-metadata-agent"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-metering-agent"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-openvswitch-agent"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-ovn-metadata-agent"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-plugin-ml2"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-server"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-sriov-agent"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "python3-neutron"
        }
    ]
}

Ubuntu:22.04:LTS / neutron

Package

Name: neutron
Purl: pkg:deb/ubuntu/neutron?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:20.3.0-0ubuntu1.1

Affected versions

2:19.*

2:19.0.0-0ubuntu1

2:19.1.0+git2022030313.b072cbf05f-0ubuntu1

2:20.*

2:20.0.0-0ubuntu1

2:20.0.0-0ubuntu2

2:20.0.0-0ubuntu3

2:20.1.0-0ubuntu2

2:20.2.0-0ubuntu1

2:20.3.0-0ubuntu1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2:20.3.0-0ubuntu1.1",
            "binary_name": "neutron-common"
        },
        {
            "binary_version": "2:20.3.0-0ubuntu1.1",
            "binary_name": "neutron-dhcp-agent"
        },
        {
            "binary_version": "2:20.3.0-0ubuntu1.1",
            "binary_name": "neutron-l3-agent"
        },
        {
            "binary_version": "2:20.3.0-0ubuntu1.1",
            "binary_name": "neutron-linuxbridge-agent"
        },
        {
            "binary_version": "2:20.3.0-0ubuntu1.1",
            "binary_name": "neutron-macvtap-agent"
        },
        {
            "binary_version": "2:20.3.0-0ubuntu1.1",
            "binary_name": "neutron-metadata-agent"
        },
        {
            "binary_version": "2:20.3.0-0ubuntu1.1",
            "binary_name": "neutron-metering-agent"
        },
        {
            "binary_version": "2:20.3.0-0ubuntu1.1",
            "binary_name": "neutron-openvswitch-agent"
        },
        {
            "binary_version": "2:20.3.0-0ubuntu1.1",
            "binary_name": "neutron-ovn-metadata-agent"
        },
        {
            "binary_version": "2:20.3.0-0ubuntu1.1",
            "binary_name": "neutron-plugin-ml2"
        },
        {
            "binary_version": "2:20.3.0-0ubuntu1.1",
            "binary_name": "neutron-server"
        },
        {
            "binary_version": "2:20.3.0-0ubuntu1.1",
            "binary_name": "neutron-sriov-agent"
        },
        {
            "binary_version": "2:20.3.0-0ubuntu1.1",
            "binary_name": "python3-neutron"
        }
    ]
}