Lucene search

K
redhatRedHatRHSA-2023:0275
HistoryJan 25, 2023 - 12:15 p.m.

(RHSA-2023:0275) Moderate: Red Hat OpenStack Platform 17.0 (openstack-neutron) security update

2023-01-2512:15:19
access.redhat.com
25
openstack
networking
security groups
cve
virtual networks

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

46.7%

OpenStack Networking (neutron) is a virtual network service for OpenStack.
Just as OpenStack Compute (nova) provides an API to dynamically request and
configure virtual servers, OpenStack Networking provides an API to
dynamically request and configure virtual networks. These networks connect
‘interfaces’ from other OpenStack services (e.g. virtual NICs from Compute
VMs). The OpenStack Networking API supports extensions to provide advanced
network capabilities (e.g. QoS, ACLs, network monitoring, etc.)

Security Fix(es):

  • unrestricted creation of security groups (CVE-2022-3277)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9noarchopenstack-neutron-linuxbridge< 18.4.1-0.20221128170741.5258354.el9ostopenstack-neutron-linuxbridge-18.4.1-0.20221128170741.5258354.el9ost.noarch.rpm
RedHat9noarchopenstack-neutron-rpc-server< 18.4.1-0.20221128170741.5258354.el9ostopenstack-neutron-rpc-server-18.4.1-0.20221128170741.5258354.el9ost.noarch.rpm
RedHat9noarchopenstack-neutron-ovn-migration-tool< 18.4.1-0.20221128170741.5258354.el9ostopenstack-neutron-ovn-migration-tool-18.4.1-0.20221128170741.5258354.el9ost.noarch.rpm
RedHat9noarchopenstack-neutron-sriov-nic-agent< 18.4.1-0.20221128170741.5258354.el9ostopenstack-neutron-sriov-nic-agent-18.4.1-0.20221128170741.5258354.el9ost.noarch.rpm
RedHat9noarchopenstack-neutron-ovn-metadata-agent< 18.4.1-0.20221128170741.5258354.el9ostopenstack-neutron-ovn-metadata-agent-18.4.1-0.20221128170741.5258354.el9ost.noarch.rpm
RedHat9noarchopenstack-neutron-macvtap-agent< 18.4.1-0.20221128170741.5258354.el9ostopenstack-neutron-macvtap-agent-18.4.1-0.20221128170741.5258354.el9ost.noarch.rpm
RedHat9noarchopenstack-neutron< 18.4.1-0.20221128170741.5258354.el9ostopenstack-neutron-18.4.1-0.20221128170741.5258354.el9ost.noarch.rpm
RedHat9noarchopenstack-neutron-common< 18.4.1-0.20221128170741.5258354.el9ostopenstack-neutron-common-18.4.1-0.20221128170741.5258354.el9ost.noarch.rpm
RedHat9noarchopenstack-neutron-ml2< 18.4.1-0.20221128170741.5258354.el9ostopenstack-neutron-ml2-18.4.1-0.20221128170741.5258354.el9ost.noarch.rpm
RedHat9noarchopenstack-neutron-metering-agent< 18.4.1-0.20221128170741.5258354.el9ostopenstack-neutron-metering-agent-18.4.1-0.20221128170741.5258354.el9ost.noarch.rpm
Rows per page:
1-10 of 121

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

46.7%