{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","type":"deb","namespace":"debian","name":"neutron","version":"2:28.0.0-8","qualifiers":{"distro":"trixie"},"subpath":"","is_vulnerable":false,"next_non_vulnerable_version":"0","latest_non_vulnerable_version":"2:28.0.0-8","affected_by_vulnerabilities":[],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/203475?format=json","vulnerability_id":"VCID-15mr-q1bx-f3gr","summary":"The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain X_AUTH_TOKEN values by reading the message queue (v2/meters/http.request).","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4615","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4615"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95960?format=json","purl":"pkg:deb/debian/neutron@2014.1.2-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2014.1.2-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2014-4615"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-15mr-q1bx-f3gr"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/8971?format=json","vulnerability_id":"VCID-1m9c-3wb6-jqgd","summary":"","references":[{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1934330","reference_id":"","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1934330"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20267","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20267"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2021-136.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2021-136.yaml"},{"reference_url":"https://security.openstack.org/ossa/OSSA-2021-001.html","reference_id":"","reference_type":"","scores":[],"url":"https://security.openstack.org/ossa/OSSA-2021-001.html"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985104","reference_id":"985104","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985104"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20267","reference_id":"CVE-2021-20267","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20267"},{"reference_url":"https://github.com/advisories/GHSA-w8hx-f868-pvch","reference_id":"GHSA-w8hx-f868-pvch","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-w8hx-f868-pvch"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95972?format=json","purl":"pkg:deb/debian/neutron@2:17.1.1-5?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.1.1-5%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2021-20267","GHSA-w8hx-f868-pvch","PYSEC-2021-136"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-1m9c-3wb6-jqgd"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/203067?format=json","vulnerability_id":"VCID-27xz-fz6q-ffb8","summary":"Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port, which is not properly handled by (1) api/metadata/handler.py in Nova and (2) the neutron-metadata-agent (agent/metadata/agent.py) in Neutron.","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6419","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6419"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95953?format=json","purl":"pkg:deb/debian/neutron@2013.2.1-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2013.2.1-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2013-6419"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-27xz-fz6q-ffb8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/1552?format=json","vulnerability_id":"VCID-3m4m-vspj-xfbf","summary":"","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5363","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5363"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:P/I:P/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95968?format=json","purl":"pkg:deb/debian/neutron@2:8.1.2-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:8.1.2-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2016-5363"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-3m4m-vspj-xfbf"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/68301?format=json","vulnerability_id":"VCID-3pbf-s3a4-fqab","summary":"In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the default policy, permitting a project reader to create and update tags on same-project resources. Deployments running Neutron 26.0.0 or later are affected.","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-49299","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-49299"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138172","reference_id":"1138172","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138172"},{"reference_url":"https://bugs.launchpad.net/bugs/2150132","reference_id":"2150132","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T14:04:25Z/"}],"url":"https://bugs.launchpad.net/bugs/2150132"},{"reference_url":"https://www.openwall.com/lists/oss-security/2026/05/28/8","reference_id":"8","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T14:04:25Z/"}],"url":"https://www.openwall.com/lists/oss-security/2026/05/28/8"},{"reference_url":"https://review.opendev.org/c/openstack/neutron/+/989099","reference_id":"989099","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T14:04:25Z/"}],"url":"https://review.opendev.org/c/openstack/neutron/+/989099"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95978?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-4?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-4%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2026-49299"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-3pbf-s3a4-fqab"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/602?format=json","vulnerability_id":"VCID-4a4s-b7uc-9ffw","summary":"","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8914","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8914"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:P/I:P/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95968?format=json","purl":"pkg:deb/debian/neutron@2:8.1.2-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:8.1.2-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2015-8914"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-4a4s-b7uc-9ffw"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/203459?format=json","vulnerability_id":"VCID-5zhc-qxqg-t7bs","summary":"The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an IPv6 private subnet to a L3 router.","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4167","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4167"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=752021","reference_id":"752021","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=752021"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95963?format=json","purl":"pkg:deb/debian/neutron@2014.1.1-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2014.1.1-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2014-4167"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-5zhc-qxqg-t7bs"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/4828?format=json","vulnerability_id":"VCID-63dz-z48q-4ygn","summary":"","references":[{"reference_url":"https://bugs.launchpad.net/neutron/+bug/1734320","reference_id":"","reference_type":"","scores":[],"url":"https://bugs.launchpad.net/neutron/+bug/1734320"},{"reference_url":"https://bugs.launchpad.net/neutron/+bug/1767422","reference_id":"","reference_type":"","scores":[],"url":"https://bugs.launchpad.net/neutron/+bug/1767422"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14636","reference_id":"","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14636"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14636","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14636"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2018-94.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2018-94.yaml"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14636","reference_id":"CVE-2018-14636","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14636"},{"reference_url":"https://github.com/advisories/GHSA-8q95-jj7p-x93x","reference_id":"GHSA-8q95-jj7p-x93x","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-8q95-jj7p-x93x"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95969?format=json","purl":"pkg:deb/debian/neutron@2:13.0.0-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:13.0.0-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2018-14636","GHSA-8q95-jj7p-x93x","PYSEC-2018-94"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-63dz-z48q-4ygn"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/12072?format=json","vulnerability_id":"VCID-7y9s-ua74-4ufc","summary":"","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3277","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3277"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1027150","reference_id":"1027150","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1027150"},{"reference_url":"https://bugs.launchpad.net/neutron/+bug/1988026","reference_id":"1988026","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-07T15:54:44Z/"}],"url":"https://bugs.launchpad.net/neutron/+bug/1988026"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129193","reference_id":"show_bug.cgi?id=2129193","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-07T15:54:44Z/"}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129193"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95976?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0~rc1-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0~rc1-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2022-3277"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7y9s-ua74-4ufc"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/15614?format=json","vulnerability_id":"VCID-8u46-jx64-q7em","summary":"","references":[{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openstack:16.1","reference_id":"cpe:/a:redhat:openstack:16.1","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openstack:16.1"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openstack:16.2::el8","reference_id":"cpe:/a:redhat:openstack:16.2::el8","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openstack:16.2::el8"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openstack:17.0","reference_id":"cpe:/a:redhat:openstack:17.0","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openstack:17.0"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openstack:17.1","reference_id":"cpe:/a:redhat:openstack:17.1","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openstack:17.1"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openstack:18.0","reference_id":"cpe:/a:redhat:openstack:18.0","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openstack:18.0"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openstack-optools:13","reference_id":"cpe:/a:redhat:openstack-optools:13","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openstack-optools:13"},{"reference_url":"https://access.redhat.com/security/cve/CVE-2023-3637","reference_id":"CVE-2023-3637","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-25T18:48:25Z/"}],"url":"https://access.redhat.com/security/cve/CVE-2023-3637"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:4283","reference_id":"RHSA-2023:4283","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-25T18:48:25Z/"}],"url":"https://access.redhat.com/errata/RHSA-2023:4283"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222270","reference_id":"show_bug.cgi?id=2222270","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-25T18:48:25Z/"}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222270"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95962?format=json","purl":"pkg:deb/debian/neutron@0?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@0%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2023-3637"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-8u46-jx64-q7em"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/203541?format=json","vulnerability_id":"VCID-95xa-x9c6-7yhu","summary":"OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to set admin network attributes to default values via unspecified vectors.","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6414","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6414"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95964?format=json","purl":"pkg:deb/debian/neutron@2014.1.3-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2014.1.3-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2014-6414"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-95xa-x9c6-7yhu"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/203393?format=json","vulnerability_id":"VCID-bx6n-fkpc-cuam","summary":"OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (crash or long firewall rule updates) by creating a large number of allowed address pairs.","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3555","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3555"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=755134","reference_id":"755134","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=755134"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95961?format=json","purl":"pkg:deb/debian/neutron@2014.1.1-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2014.1.1-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2014-3555"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-bx6n-fkpc-cuam"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/10039?format=json","vulnerability_id":"VCID-cayd-9jza-v7fg","summary":"","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40085","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40085"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/openstack/neutron/commit/df891f0593d234e01f27d7c0376d9702e178ecfb","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/openstack/neutron/commit/df891f0593d234e01f27d7c0376d9702e178ecfb"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2021-361.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2021-361.yaml"},{"reference_url":"https://launchpad.net/bugs/1939733","reference_id":"","reference_type":"","scores":[],"url":"https://launchpad.net/bugs/1939733"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/10/msg00005.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.debian.org/debian-lts-announce/2021/10/msg00005.html"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00038.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00038.html"},{"reference_url":"https://security.openstack.org/ossa/OSSA-2021-005.html","reference_id":"","reference_type":"","scores":[],"url":"https://security.openstack.org/ossa/OSSA-2021-005.html"},{"reference_url":"https://www.debian.org/security/2021/dsa-4983","reference_id":"","reference_type":"","scores":[],"url":"https://www.debian.org/security/2021/dsa-4983"},{"reference_url":"http://www.openwall.com/lists/oss-security/2021/08/31/2","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2021/08/31/2"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=993398","reference_id":"993398","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=993398"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-40085","reference_id":"CVE-2021-40085","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-40085"},{"reference_url":"https://github.com/advisories/GHSA-fh73-gjvg-349c","reference_id":"GHSA-fh73-gjvg-349c","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-fh73-gjvg-349c"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95974?format=json","purl":"pkg:deb/debian/neutron@2:18.1.0-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:18.1.0-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2021-40085","GHSA-fh73-gjvg-349c","PYSEC-2021-361"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-cayd-9jza-v7fg"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/203077?format=json","vulnerability_id":"VCID-crfx-x8r3-r3dy","summary":"The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootwrap, which allows remote attackers to gain privileges via a crafted configuration file.","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6433","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6433"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95958?format=json","purl":"pkg:deb/debian/neutron@2014.1-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2014.1-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2013-6433"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-crfx-x8r3-r3dy"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3887?format=json","vulnerability_id":"VCID-czem-5bx4-h7da","summary":"","references":[{"reference_url":"https://access.redhat.com/errata/RHSA-2017:2447","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2017:2447"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:2448","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2017:2448"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:2449","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2017:2449"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:2450","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2017:2450"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:2451","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2017:2451"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:2452","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2017:2452"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1473792","reference_id":"","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1473792"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7543","reference_id":"","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7543"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"2.6","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:H/Au:N/C:P/I:N/A:N"},{"value":"6.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://web.archive.org/web/20200227153412/https://www.securityfocus.com/bid/100237","reference_id":"","reference_type":"","scores":[],"url":"https://web.archive.org/web/20200227153412/https://www.securityfocus.com/bid/100237"},{"reference_url":"https://access.redhat.com/security/cve/CVE-2017-7543","reference_id":"CVE-2017-7543","reference_type":"","scores":[],"url":"https://access.redhat.com/security/cve/CVE-2017-7543"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7543","reference_id":"CVE-2017-7543","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7543"},{"reference_url":"https://github.com/advisories/GHSA-hvxr-2fvv-c3wq","reference_id":"GHSA-hvxr-2fvv-c3wq","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-hvxr-2fvv-c3wq"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95962?format=json","purl":"pkg:deb/debian/neutron@0?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@0%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2017-7543","GHSA-hvxr-2fvv-c3wq"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-czem-5bx4-h7da"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/203907?format=json","vulnerability_id":"VCID-dary-4vvm-u7dw","summary":"OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 (kilo), when using the IPTables firewall driver, allows remote authenticated users to cause a denial of service (L2 agent crash) by adding an address pair that is rejected by the ipset tool.","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3221","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3221"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=789713","reference_id":"789713","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=789713"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95966?format=json","purl":"pkg:deb/debian/neutron@2015.1.0%2B2015.06.24.git61.bdf194a0e1-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2015.1.0%252B2015.06.24.git61.bdf194a0e1-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2015-3221"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-dary-4vvm-u7dw"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/203222?format=json","vulnerability_id":"VCID-dqft-gggs-pkcy","summary":"The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports into the routers of arbitrary tenants via the device id in a port-create command.","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0056","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0056"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742800","reference_id":"742800","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742800"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95959?format=json","purl":"pkg:deb/debian/neutron@2013.2.2-4?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2013.2.2-4%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2014-0056"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-dqft-gggs-pkcy"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/44526?format=json","vulnerability_id":"VCID-hs5q-wv5z-zkax","summary":"In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant is able to change (add and clear) tags on network objects that do not belong to the tenant, and this action is not subjected to the proper policy authorization check. This affects 23 before 23.2.1, 24 before 24.0.2, and 25 before 25.0.1.","references":[{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1088802","reference_id":"1088802","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1088802"},{"reference_url":"https://review.opendev.org/c/openstack/neutron/+/935883","reference_id":"935883","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-27T16:37:11Z/"}],"url":"https://review.opendev.org/c/openstack/neutron/+/935883"},{"reference_url":"https://review.opendev.org/q/project:openstack/neutron","reference_id":"neutron","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-27T16:37:11Z/"}],"url":"https://review.opendev.org/q/project:openstack/neutron"},{"reference_url":"https://security.openstack.org/ossa/OSSA-2024-005.html","reference_id":"OSSA-2024-005.html","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-27T16:37:11Z/"}],"url":"https://security.openstack.org/ossa/OSSA-2024-005.html"},{"reference_url":"https://github.com/openstack/neutron/blob/363ffa6e9e1ab5968f87d45bc2f1cb6394f48b9f/neutron/extensions/tagging.py#L138-L232","reference_id":"tagging.py#L138-L232","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-27T16:37:11Z/"}],"url":"https://github.com/openstack/neutron/blob/363ffa6e9e1ab5968f87d45bc2f1cb6394f48b9f/neutron/extensions/tagging.py#L138-L232"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95962?format=json","purl":"pkg:deb/debian/neutron@0?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@0%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95977?format=json","purl":"pkg:deb/debian/neutron@2:25.0.0-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:25.0.0-2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2024-53916"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-hs5q-wv5z-zkax"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/10065?format=json","vulnerability_id":"VCID-jpca-jpwa-7bau","summary":"","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40797","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40797"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/openstack/neutron/commit/e610a5eb9e71aa2549fb11e2139370d227787da2","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/openstack/neutron/commit/e610a5eb9e71aa2549fb11e2139370d227787da2"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2021-329.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2021-329.yaml"},{"reference_url":"https://launchpad.net/bugs/1942179","reference_id":"","reference_type":"","scores":[],"url":"https://launchpad.net/bugs/1942179"},{"reference_url":"https://security.openstack.org/ossa/OSSA-2021-006.html","reference_id":"","reference_type":"","scores":[],"url":"https://security.openstack.org/ossa/OSSA-2021-006.html"},{"reference_url":"http://www.openwall.com/lists/oss-security/2021/09/09/2","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2021/09/09/2"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=994202","reference_id":"994202","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=994202"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-40797","reference_id":"CVE-2021-40797","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-40797"},{"reference_url":"https://github.com/advisories/GHSA-cpx3-696p-3cw9","reference_id":"GHSA-cpx3-696p-3cw9","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-cpx3-696p-3cw9"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95975?format=json","purl":"pkg:deb/debian/neutron@2:19.0.0-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:19.0.0-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2021-40797","GHSA-cpx3-696p-3cw9","PYSEC-2021-329"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-jpca-jpwa-7bau"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/218584?format=json","vulnerability_id":"VCID-mbx4-wmr1-e3dk","summary":"The L3 agent in OpenStack Neutron 2014.2.x before 2014.2.2, when using radvd 2.0+, allows remote authenticated users to cause a denial of service (blocked router update processing) by creating eight routers and assigning an ipv6 non-provider subnet to each.","references":[],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95962?format=json","purl":"pkg:deb/debian/neutron@0?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@0%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2014-8153"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-mbx4-wmr1-e3dk"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/4827?format=json","vulnerability_id":"VCID-mk8m-6cxt-ffak","summary":"","references":[{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2710","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2018:2710"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2715","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2018:2715"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2721","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2018:2721"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:3792","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2018:3792"},{"reference_url":"https://bugs.launchpad.net/neutron/+bug/1757482","reference_id":"","reference_type":"","scores":[],"url":"https://bugs.launchpad.net/neutron/+bug/1757482"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14635","reference_id":"","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14635"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14635","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14635"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/openstack/neutron/commit/54aa6e81cb17b33ce4d5d469cc11dec2869c762d","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/openstack/neutron/commit/54aa6e81cb17b33ce4d5d469cc11dec2869c762d"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2018-93.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2018-93.yaml"},{"reference_url":"https://git.openstack.org/cgit/openstack/neutron/commit/?id=54aa6e81cb17b33ce4d5d469cc11dec2869c762d","reference_id":"","reference_type":"","scores":[],"url":"https://git.openstack.org/cgit/openstack/neutron/commit/?id=54aa6e81cb17b33ce4d5d469cc11dec2869c762d"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14635","reference_id":"CVE-2018-14635","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14635"},{"reference_url":"https://github.com/advisories/GHSA-x634-34m9-96mp","reference_id":"GHSA-x634-34m9-96mp","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-x634-34m9-96mp"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95969?format=json","purl":"pkg:deb/debian/neutron@2:13.0.0-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:13.0.0-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2018-14635","GHSA-x634-34m9-96mp","PYSEC-2018-93"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-mk8m-6cxt-ffak"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/203974?format=json","vulnerability_id":"VCID-q94j-kxsw-wbfv","summary":"Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API, allows remote authenticated users to bypass IP anti-spoofing controls by changing the device owner of a port to start with network: before the security group rules are applied.","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5240","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5240"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95967?format=json","purl":"pkg:deb/debian/neutron@1:7.0.0-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@1:7.0.0-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2015-5240"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-q94j-kxsw-wbfv"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/1551?format=json","vulnerability_id":"VCID-rkr5-zved-b7cp","summary":"","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5362","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5362"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:P/I:P/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95968?format=json","purl":"pkg:deb/debian/neutron@2:8.1.2-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:8.1.2-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2016-5362"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-rkr5-zved-b7cp"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/218583?format=json","vulnerability_id":"VCID-tj7y-z6yk-6qh8","summary":"The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allows remote attackers to gain privileges via a crafted configuration file.  NOTE: this vulnerability exists because of a CVE-2013-6433 regression.","references":[],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95962?format=json","purl":"pkg:deb/debian/neutron@0?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@0%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2014-3632"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-tj7y-z6yk-6qh8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/203226?format=json","vulnerability_id":"VCID-uy7f-a9wy-e3ew","summary":"PackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to Neutron, which allows remote attackers to bypass intended access restrictions and make unauthorized connections.","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0071","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0071"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95958?format=json","purl":"pkg:deb/debian/neutron@2014.1-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2014.1-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2014-0071"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-uy7f-a9wy-e3ew"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/203561?format=json","vulnerability_id":"VCID-vq88-38xc-rkae","summary":"OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (crash) via a crafted dns_nameservers value in the DNS configuration.","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7821","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7821"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770431","reference_id":"770431","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770431"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95965?format=json","purl":"pkg:deb/debian/neutron@2014.1.3-6?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2014.1.3-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2014-7821"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-vq88-38xc-rkae"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7385?format=json","vulnerability_id":"VCID-w745-f4y3-ubgp","summary":"","references":[{"reference_url":"https://access.redhat.com/errata/RHSA-2019:0879","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2019:0879"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:0916","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2019:0916"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:0935","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2019:0935"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9735","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9735"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2019-190.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2019-190.yaml"},{"reference_url":"https://launchpad.net/bugs/1818385","reference_id":"","reference_type":"","scores":[],"url":"https://launchpad.net/bugs/1818385"},{"reference_url":"https://seclists.org/bugtraq/2019/Mar/24","reference_id":"","reference_type":"","scores":[],"url":"https://seclists.org/bugtraq/2019/Mar/24"},{"reference_url":"https://security.openstack.org/ossa/OSSA-2019-001.html","reference_id":"","reference_type":"","scores":[],"url":"https://security.openstack.org/ossa/OSSA-2019-001.html"},{"reference_url":"https://usn.ubuntu.com/4036-1","reference_id":"","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/4036-1"},{"reference_url":"https://usn.ubuntu.com/4036-1/","reference_id":"","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/4036-1/"},{"reference_url":"https://web.archive.org/web/20201208185619/http://www.securityfocus.com/bid/107390","reference_id":"","reference_type":"","scores":[],"url":"https://web.archive.org/web/20201208185619/http://www.securityfocus.com/bid/107390"},{"reference_url":"https://www.debian.org/security/2019/dsa-4409","reference_id":"","reference_type":"","scores":[],"url":"https://www.debian.org/security/2019/dsa-4409"},{"reference_url":"http://www.openwall.com/lists/oss-security/2019/03/18/2","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2019/03/18/2"},{"reference_url":"http://www.securityfocus.com/bid/107390","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/107390"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=924508","reference_id":"924508","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=924508"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9735","reference_id":"CVE-2019-9735","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9735"},{"reference_url":"https://github.com/advisories/GHSA-9773-3fqg-8w25","reference_id":"GHSA-9773-3fqg-8w25","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-9773-3fqg-8w25"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95971?format=json","purl":"pkg:deb/debian/neutron@2:13.0.2-13?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:13.0.2-13%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2019-9735","GHSA-9773-3fqg-8w25","PYSEC-2019-190"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-w745-f4y3-ubgp"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/6012?format=json","vulnerability_id":"VCID-y75j-mxuh-dfag","summary":"","references":[{"reference_url":"https://access.redhat.com/errata/RHSA-2019:0879","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2019:0879"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:0935","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2019:0935"},{"reference_url":"https://bugs.launchpad.net/ossa/+bug/1813007","reference_id":"","reference_type":"","scores":[],"url":"https://bugs.launchpad.net/ossa/+bug/1813007"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10876","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10876"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2019-189.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2019-189.yaml"},{"reference_url":"https://review.openstack.org/#/q/topic:bug/1813007","reference_id":"","reference_type":"","scores":[],"url":"https://review.openstack.org/#/q/topic:bug/1813007"},{"reference_url":"https://security.openstack.org/ossa/OSSA-2019-002.html","reference_id":"","reference_type":"","scores":[],"url":"https://security.openstack.org/ossa/OSSA-2019-002.html"},{"reference_url":"http://www.openwall.com/lists/oss-security/2019/04/09/2","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2019/04/09/2"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926502","reference_id":"926502","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926502"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10876","reference_id":"CVE-2019-10876","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10876"},{"reference_url":"https://github.com/advisories/GHSA-jr9m-v5qh-mh2j","reference_id":"GHSA-jr9m-v5qh-mh2j","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-jr9m-v5qh-mh2j"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95970?format=json","purl":"pkg:deb/debian/neutron@2:13.0.2-15?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:13.0.2-15%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2019-10876","GHSA-jr9m-v5qh-mh2j","PYSEC-2019-189"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-y75j-mxuh-dfag"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/80568?format=json","vulnerability_id":"VCID-ytat-q1mr-hqcr","summary":"In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set device_owner to a value that has \"network:\" at the beginning (\"network:dhcp\" for example). The default port RBAC policies incorrectly included PROJECT_MANAGER without requiring network ownership, allowing any project manager to obtain trusted network-service port behavior on shared networks. Depending on backend and deployment, this can bypass anti-spoofing and security group protections, enabling DHCP, MAC, or IP spoofing against other tenants on the shared network. This is a regression of CVE-2015-5240 (OSSA-2015-018).","references":[{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138844","reference_id":"1138844","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138844"},{"reference_url":"https://launchpad.net/bugs/2152115","reference_id":"2152115","reference_type":"","scores":[{"value":"2.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-06-04T17:27:57Z/"}],"url":"https://launchpad.net/bugs/2152115"},{"reference_url":"https://www.openwall.com/lists/oss-security/2026/06/04/6","reference_id":"6","reference_type":"","scores":[{"value":"2.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-06-04T17:27:57Z/"}],"url":"https://www.openwall.com/lists/oss-security/2026/06/04/6"},{"reference_url":"https://review.opendev.org/990273","reference_id":"990273","reference_type":"","scores":[{"value":"2.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-06-04T17:27:57Z/"}],"url":"https://review.opendev.org/990273"},{"reference_url":"https://review.opendev.org/990353","reference_id":"990353","reference_type":"","scores":[{"value":"2.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-06-04T17:27:57Z/"}],"url":"https://review.opendev.org/990353"},{"reference_url":"https://review.opendev.org/990356","reference_id":"990356","reference_type":"","scores":[{"value":"2.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-06-04T17:27:57Z/"}],"url":"https://review.opendev.org/990356"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95962?format=json","purl":"pkg:deb/debian/neutron@0?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@0%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95980?format=json","purl":"pkg:deb/debian/neutron@2:26.0.3-0%2Bdeb13u2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.3-0%252Bdeb13u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95979?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-7?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2026-50266"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ytat-q1mr-hqcr"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/203262?format=json","vulnerability_id":"VCID-yuwh-jqb8-vba7","summary":"The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied.","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0187","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0187"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95960?format=json","purl":"pkg:deb/debian/neutron@2014.1.2-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2014.1.2-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2014-0187"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-yuwh-jqb8-vba7"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/9954?format=json","vulnerability_id":"VCID-zcrp-f4q7-xbap","summary":"","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38598","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38598"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/openstack/neutron/commit/0a931391d8990f3e654b4bfda24ae4119c609bbf","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/openstack/neutron/commit/0a931391d8990f3e654b4bfda24ae4119c609bbf"},{"reference_url":"https://github.com/openstack/neutron/commit/cc0d28a3e2ccfad6fc2ff24d78f009cbe3992575","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/openstack/neutron/commit/cc0d28a3e2ccfad6fc2ff24d78f009cbe3992575"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2021-360.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2021-360.yaml"},{"reference_url":"https://launchpad.net/bugs/1938670","reference_id":"","reference_type":"","scores":[],"url":"https://launchpad.net/bugs/1938670"},{"reference_url":"https://opendev.org/openstack/neutron/commit/fafa5dacd5057120562184a734e7345e7c0e9639","reference_id":"","reference_type":"","scores":[],"url":"https://opendev.org/openstack/neutron/commit/fafa5dacd5057120562184a734e7345e7c0e9639"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-38598","reference_id":"CVE-2021-38598","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-38598"},{"reference_url":"https://github.com/advisories/GHSA-hvm4-mc7m-22w4","reference_id":"GHSA-hvm4-mc7m-22w4","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-hvm4-mc7m-22w4"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/95954?format=json","purl":"pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-7y9s-ua74-4ufc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95973?format=json","purl":"pkg:deb/debian/neutron@2:18.1.0-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:18.1.0-2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95952?format=json","purl":"pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95957?format=json","purl":"pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95955?format=json","purl":"pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3pbf-s3a4-fqab"},{"vulnerability":"VCID-ytat-q1mr-hqcr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/95956?format=json","purl":"pkg:deb/debian/neutron@2:28.0.0-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}],"aliases":["CVE-2021-38598","GHSA-hvm4-mc7m-22w4","PYSEC-2021-360"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zcrp-f4q7-xbap"}],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-8%3Fdistro=trixie"}