CVE-2015-7713 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2015-7713 Interim 1 10 2023-02-15T01:46:50Z current 2021-05-30T13:34:17Z 2023-02-15T01:46:50Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2015-7713 OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2015-December/001723.html E-Mail link for SUSE-SU-2015:2219-1 https://lists.suse.com/pipermail/sle-security-updates/2015-December/001724.html E-Mail link for SUSE-SU-2015:2220-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE OpenStack Cloud 5 openstack-neutron-2014.2.4~a0~dev103-10.3 openstack-neutron-dhcp-agent-2014.2.4~a0~dev103-10.3 openstack-neutron-ha-tool-2014.2.4~a0~dev103-10.3 openstack-neutron-l3-agent-2014.2.4~a0~dev103-10.3 openstack-neutron-lbaas-agent-2014.2.4~a0~dev103-10.3 openstack-neutron-linuxbridge-agent-2014.2.4~a0~dev103-10.3 openstack-neutron-metadata-agent-2014.2.4~a0~dev103-10.3 openstack-neutron-metering-agent-2014.2.4~a0~dev103-10.3 openstack-neutron-openvswitch-agent-2014.2.4~a0~dev103-10.3 openstack-neutron-vpn-agent-2014.2.4~a0~dev103-10.3 openstack-nova-2014.2.4~a0~dev80-14.1 openstack-nova-2014.2.4~a0~dev80-20.1 openstack-nova-api-2014.2.4~a0~dev80-20.1 openstack-nova-cells-2014.2.4~a0~dev80-20.1 openstack-nova-cert-2014.2.4~a0~dev80-20.1 openstack-nova-compute-2014.2.4~a0~dev80-14.1 openstack-nova-compute-2014.2.4~a0~dev80-20.1 openstack-nova-conductor-2014.2.4~a0~dev80-20.1 openstack-nova-console-2014.2.4~a0~dev80-20.1 openstack-nova-consoleauth-2014.2.4~a0~dev80-20.1 openstack-nova-doc-2014.2.4~a0~dev80-20.1 openstack-nova-novncproxy-2014.2.4~a0~dev80-20.1 openstack-nova-objectstore-2014.2.4~a0~dev80-20.1 openstack-nova-scheduler-2014.2.4~a0~dev80-20.1 openstack-nova-serialproxy-2014.2.4~a0~dev80-20.1 openstack-nova-vncproxy-2014.2.4~a0~dev80-20.1 python-neutron-2014.2.4~a0~dev103-10.3 python-nova-2014.2.4~a0~dev80-14.1 python-nova-2014.2.4~a0~dev80-20.1 python-python-memcached-1.54-2.1 openstack-neutron-2014.2.4~a0~dev103-10.3 as a component of SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 openstack-neutron-dhcp-agent-2014.2.4~a0~dev103-10.3 as a component of SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 openstack-neutron-ha-tool-2014.2.4~a0~dev103-10.3 as a component of SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 openstack-neutron-l3-agent-2014.2.4~a0~dev103-10.3 as a component of SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 openstack-neutron-lbaas-agent-2014.2.4~a0~dev103-10.3 as a component of SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 openstack-neutron-linuxbridge-agent-2014.2.4~a0~dev103-10.3 as a component of SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 openstack-neutron-metadata-agent-2014.2.4~a0~dev103-10.3 as a component of SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 openstack-neutron-metering-agent-2014.2.4~a0~dev103-10.3 as a component of SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 openstack-neutron-openvswitch-agent-2014.2.4~a0~dev103-10.3 as a component of SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 openstack-neutron-vpn-agent-2014.2.4~a0~dev103-10.3 as a component of SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 openstack-nova-2014.2.4~a0~dev80-14.1 as a component of SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 openstack-nova-compute-2014.2.4~a0~dev80-14.1 as a component of SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 python-neutron-2014.2.4~a0~dev103-10.3 as a component of SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 python-nova-2014.2.4~a0~dev80-14.1 as a component of SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 python-python-memcached-1.54-2.1 as a component of SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 openstack-nova-2014.2.4~a0~dev80-20.1 as a component of SUSE OpenStack Cloud 5 openstack-nova-api-2014.2.4~a0~dev80-20.1 as a component of SUSE OpenStack Cloud 5 openstack-nova-cells-2014.2.4~a0~dev80-20.1 as a component of SUSE OpenStack Cloud 5 openstack-nova-cert-2014.2.4~a0~dev80-20.1 as a component of SUSE OpenStack Cloud 5 openstack-nova-compute-2014.2.4~a0~dev80-20.1 as a component of SUSE OpenStack Cloud 5 openstack-nova-conductor-2014.2.4~a0~dev80-20.1 as a component of SUSE OpenStack Cloud 5 openstack-nova-console-2014.2.4~a0~dev80-20.1 as a component of SUSE OpenStack Cloud 5 openstack-nova-consoleauth-2014.2.4~a0~dev80-20.1 as a component of SUSE OpenStack Cloud 5 openstack-nova-doc-2014.2.4~a0~dev80-20.1 as a component of SUSE OpenStack Cloud 5 openstack-nova-novncproxy-2014.2.4~a0~dev80-20.1 as a component of SUSE OpenStack Cloud 5 openstack-nova-objectstore-2014.2.4~a0~dev80-20.1 as a component of SUSE OpenStack Cloud 5 openstack-nova-scheduler-2014.2.4~a0~dev80-20.1 as a component of SUSE OpenStack Cloud 5 openstack-nova-serialproxy-2014.2.4~a0~dev80-20.1 as a component of SUSE OpenStack Cloud 5 openstack-nova-vncproxy-2014.2.4~a0~dev80-20.1 as a component of SUSE OpenStack Cloud 5 python-nova-2014.2.4~a0~dev80-20.1 as a component of SUSE OpenStack Cloud 5 OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. CVE-2015-7713 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:openstack-neutron-2014.2.4~a0~dev103-10.3 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:openstack-neutron-dhcp-agent-2014.2.4~a0~dev103-10.3 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:openstack-neutron-ha-tool-2014.2.4~a0~dev103-10.3 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:openstack-neutron-l3-agent-2014.2.4~a0~dev103-10.3 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:openstack-neutron-lbaas-agent-2014.2.4~a0~dev103-10.3 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:openstack-neutron-linuxbridge-agent-2014.2.4~a0~dev103-10.3 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:openstack-neutron-metadata-agent-2014.2.4~a0~dev103-10.3 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:openstack-neutron-metering-agent-2014.2.4~a0~dev103-10.3 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:openstack-neutron-openvswitch-agent-2014.2.4~a0~dev103-10.3 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:openstack-neutron-vpn-agent-2014.2.4~a0~dev103-10.3 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:openstack-nova-2014.2.4~a0~dev80-14.1 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:openstack-nova-compute-2014.2.4~a0~dev80-14.1 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:python-neutron-2014.2.4~a0~dev103-10.3 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:python-nova-2014.2.4~a0~dev80-14.1 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:python-python-memcached-1.54-2.1 SUSE OpenStack Cloud 5:openstack-nova-2014.2.4~a0~dev80-20.1 SUSE OpenStack Cloud 5:openstack-nova-api-2014.2.4~a0~dev80-20.1 SUSE OpenStack Cloud 5:openstack-nova-cells-2014.2.4~a0~dev80-20.1 SUSE OpenStack Cloud 5:openstack-nova-cert-2014.2.4~a0~dev80-20.1 SUSE OpenStack Cloud 5:openstack-nova-compute-2014.2.4~a0~dev80-20.1 SUSE OpenStack Cloud 5:openstack-nova-conductor-2014.2.4~a0~dev80-20.1 SUSE OpenStack Cloud 5:openstack-nova-console-2014.2.4~a0~dev80-20.1 SUSE OpenStack Cloud 5:openstack-nova-consoleauth-2014.2.4~a0~dev80-20.1 SUSE OpenStack Cloud 5:openstack-nova-doc-2014.2.4~a0~dev80-20.1 SUSE OpenStack Cloud 5:openstack-nova-novncproxy-2014.2.4~a0~dev80-20.1 SUSE OpenStack Cloud 5:openstack-nova-objectstore-2014.2.4~a0~dev80-20.1 SUSE OpenStack Cloud 5:openstack-nova-scheduler-2014.2.4~a0~dev80-20.1 SUSE OpenStack Cloud 5:openstack-nova-serialproxy-2014.2.4~a0~dev80-20.1 SUSE OpenStack Cloud 5:openstack-nova-vncproxy-2014.2.4~a0~dev80-20.1 SUSE OpenStack Cloud 5:python-nova-2014.2.4~a0~dev80-20.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N