Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Ubuntu 13.10 USN-2194-1 Critical: OpenStack Neutron Access Issue

ubuntu
Calendar Grey May 5, 2014
Scroller Ubuntu
OpenStack Neutron exposes unauthorized network access; Ubuntu security advisory USN-2194-1 outlines the corrective measures taken.
OpenStack Neutron would allow unintended access to other tenant networks.

Summary

OpenStack Neutron would allow unintended access to other tenant networks.

Software Description:

- neutron: Openstack Virtual Network Service

Details:

Aaron Rosen discovered that OpenStack Neutron did not properly perform

authorization checks when creating ports when using plugins relying on the

l3-agent. A remote authenticated attacker could exploit this to access the

network of other tenants.

Topics%20covered

Topics Covered

security advisory unauthorized access security issue ubuntu network access openstack neutron

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.10:
  python-neutron                  1:2013.2.3-0ubuntu1.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2194-1

CVE-2014-0056

Severity
critical
Lowest
Low
Medium
High
Critical

=========================================================================Ubuntu Security Notice USN-2194-1

Topics%20covered

Topics Covered

security advisory unauthorized access security issue ubuntu network access openstack neutron

Package Information

https://launchpad.net/ubuntu/+source/neutron/1:2013.2.3-0ubuntu1.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.