OpenStack Neutron Improper Input Validation vulnerability
Date: 2022-05
Affected: pip/neutron, pip/neutron
Attack vector: dos
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2015-3221
CWE: CWE-20

OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 (kilo), when using the IPTables firewall driver, allows remote authenticated users to cause a denial of service (L2 agent crash) by adding an address pair that is rejected by the ipset tool.


Mitigations:

Architectural layers (MAESTRO):