~ubuntu-security/ubuntu-cve-tracker/master

« back to all changes in this revision

Viewing changes to retired/CVE-2014-3555

  • Committer: Steve Beattie
  • Date: 2019-02-19 06:18:27 UTC
  • Revision ID: sbeattie@ubuntu.com-20190219061827-oh57fzcfc1u9dlfk
The ubuntu-cve-tracker project has been converted to git.

Please use 'git clone https://git.launchpad.net/ubuntu-cve-tracker' to
get the converted tree.

Show diffs side-by-side

added added

removed removed

Lines of Context:
1
 
PublicDateAtUSN: 2014-07-23
2
 
Candidate: CVE-2014-3555
3
 
PublicDate: 2014-07-23
4
 
References:
5
 
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3555
6
 
 http://lists.openstack.org/pipermail/openstack-announce/2014-July/000255.html
7
 
 https://usn.ubuntu.com/usn/usn-2321-1
8
 
Description:
9
 
 OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before
10
 
 Juno-2 allows remote authenticated users to cause a denial of service
11
 
 (crash or long firewall rule updates) by creating a large number of allowed
12
 
 address pairs.
13
 
Ubuntu-Description:
14
 
Notes:
15
 
 jdstrand> requires authenticated access
16
 
Bugs:
17
 
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=755134
18
 
 https://bugs.launchpad.net/ubuntu/+source/nova/+bug/1354159 (2014.1.2)
19
 
 http://launchpad.net/bugs/1336207
20
 
Priority: medium
21
 
Discovered-by: Liping Mao
22
 
Assigned-to: jdstrand
23
 
 
24
 
Patches_neutron:
25
 
 upstream: https://review.openstack.org/gitweb?p=openstack%2Fneutron.git;a=commitdiff;h=2c4828e28a5ff6e537be9db4da0e98eca33135d5
26
 
upstream_neutron: released (2014.1.1-3,2014.1.2)
27
 
lucid_neutron: DNE
28
 
precise_neutron: DNE
29
 
trusty_neutron: released (1:2014.1.2-0ubuntu1)
30
 
devel_neutron: not-affected (1:2014.2~b2-0ubuntu1)