4

CVE-2015-3221: openstack neutron Improper Input Validation

CVSS: 4.0v2.0MediumModified
AliasesGHSA-wf44-4mgj-rwvxPYSEC-2026-856RHSA-2015:1680
Published 26-08-2015Last modified 06-08-2024
Open JSON

Vulnerability summary

CVE-2015-3221 is a medium (CVSS 4.0) Improper Input Validation vulnerability in openstack neutron. EPSS estimates a 11.43% chance of exploitation in the next 30 days, higher than 95.9% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
28/100
0100
Medium · default modelHow is this calculated?
CVSS score
4.0/10
010
Medium · v2.0 (NVD)
EPSS score
11.43%
0%100%
Medium · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 2 · Related 2
SUSE-SU-2015:1890-1SUSE-SU-2015:2220-1

Timeline

  1. 26-08-2015
    PublishedVulnerability first disclosed.
  2. 06-08-2024
    Last modifiedVulnerability information updated.

Description

OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 (kilo), when using the IPTables firewall driver, allows remote authenticated users to cause a denial of service (L2 agent crash) by adding an address pair that is rejected by the ipset tool.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

11.43%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 11.43% on 18-09-2026

18-09-202618-10-2026
EPSS score
11.43%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • exploit-databasephpUnverified

    GeniXCMS 0.0.3 - Cross-Site Scripting

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Redhat26 products
  • openstack-neutron< 0:2014.2.3-9.el7ost
  • openstack-neutron-bigswitch< 0:2014.2.3-9.el7ost
  • openstack-neutron-brocade< 0:2014.2.3-9.el7ost
  • openstack-neutron-cisco< 0:2014.2.3-9.el7ost
  • openstack-neutron-common< 0:2014.2.3-9.el7ost
Debian1 product
  • neutron< 2015.1.0+2015.06.24.git61.bdf194a0e1-1
Openstack1 product
  • neutron≥ 2014.2, < 2014.2.4 | ≥ 2015.1.0, < 2015.1.1
PyPI1 product
  • neutron≥ 2000, < 2014.2.4 | ≥ 2015.1.0, < 2015.1.1

4 vendors · 29 products

References

21 links
Show all 21 references