DescriptionThe L3 agent in OpenStack Neutron 2014.2.x before 2014.2.2, when using radvd 2.0+, allows remote authenticated users to cause a denial of service (blocked router update processing) by creating eight routers and assigning an ipv6 non-provider subnet to each.
Overall state of this security issue: Running
This issue is currently rated as having low severity.
|National Vulnerability Database|
List of released packages
|Product(s)||Fixed package version(s)||References|
|SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5|| ||Patchnames:
SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 GA openstack-neutron
|SUSE OpenStack Cloud 6|| ||Patchnames:
SUSE OpenStack Cloud 6 GA openstack-neutron
Status of this issue by product and package
Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification.
|SUSE Cloud 11.3||openstack-neutron||Not affected|
|SUSE Cloud 4||openstack-neutron||Not affected|
|SUSE Cloud 5||openstack-neutron||Already fixed|
|SUSE Openstack Cloud 9||openstack-neutron||In progress|