Test Kennung:	1.3.6.1.4.1.25623.1.0.841869
Kategorie:	Ubuntu Local Security Checks
Titel:	Ubuntu Update for neutron USN-2255-1
Zusammenfassung:	The remote host is missing an update for the 'neutron'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'neutron' package(s) announced via the referenced advisory. Vulnerability Insight: Darragh O'Reilly discovered that the Ubuntu packaging for OpenStack Neutron did not properly set up its sudo configuration. If a different flaw was found in OpenStack Neutron, this vulnerability could be used to escalate privileges. (CVE-2013-6433) Stephen Ma and Christoph Thiel discovered that the openvswitch-agent in OpenStack Neutron did not properly perform input validation when creating security group rules when specifying --remote-ip-prefix. A remote authenticated attacker could exploit this to prevent application of additional rules. (CVE-2014-0187) Thiago Martins discovered that OpenStack Neutron would inappropriately apply SNAT rules to IPv6 subnets when using the L3-agent. A remote authenticated attacker could exploit this to prevent floating IPv4 addresses from being attached throughout the cloud. (CVE-2014-4167) Affected Software/OS: neutron on Ubuntu 14.04 LTS, Ubuntu 13.10 Solution: Please Install the Updated Packages. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6433 RedHat Security Advisories: RHSA-2014:0516 http://rhn.redhat.com/errata/RHSA-2014-0516.html http://secunia.com/advisories/59533 http://www.ubuntu.com/usn/USN-2255-1 Common Vulnerability Exposure (CVE) ID: CVE-2014-0187 http://www.openwall.com/lists/oss-security/2014/04/22/8 SuSE Security Announcement: openSUSE-SU-2014:1051 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-08/msg00035.html Common Vulnerability Exposure (CVE) ID: CVE-2014-4167 http://seclists.org/oss-sec/2014/q2/572
Copyright	Copyright (C) 2014 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.