Lookup for vulnerable packages by Package URL.
| Purl | pkg:pypi/neutron@2014.2.4 |
| Type | pypi |
| Namespace | |
| Name | neutron |
| Version | 2014.2.4 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | false |
| Next_non_vulnerable_version | 2015.1.1 |
| Latest_non_vulnerable_version | 2015.1.1 |
| Affected_by_vulnerabilities |
|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-n4sa-8h57-xkfu |
| vulnerability_id |
VCID-n4sa-8h57-xkfu |
| summary |
Improper Input Validation
A Denial-of-Service flaw was found in the OpenStack Networking (neutron) L2 agent when using the iptables firewall driver. By submitting an address pair that is rejected as invalid by the ipset tool (with zero prefix size), an authenticated attacker can cause the L2 agent to crash. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2015-3221, GHSA-wf44-4mgj-rwvx
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-n4sa-8h57-xkfu |
|
|
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:pypi/neutron@2014.2.4 |