Vulnerability · Published Nov 24, 2024 · Assigned by mitre
CVE-2024-53916
High 7.5
In plain English
A high-severity security flaw in the neutron package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant is able to change (add and clear) tags on network objects that do not belong to the tenant, and this action is not subjected to the proper policy authorization check. This affects 23 before 23.2.1, 24 before 24.0.2, and 25 before 25.0.1.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:13 | neutron | 2:25.0.0-2 | DEBIAN-CVE-2024-53916 |
| Debian:14 | neutron | 2:25.0.0-2 | DEBIAN-CVE-2024-53916 |
| PyPI | neutron | 25.0.1 | GHSA-f27h-g923-68hw |
| PyPI | neutron | 23.2.1 | GHSA-f27h-g923-68hw |
| PyPI | neutron | 23.2.1, 24.0.2, 25.0.1 | PYSEC-2026-1693 |
| PyPI | neutron | 24.0.2 | GHSA-f27h-g923-68hw |
| Ubuntu:24.04:LTS | neutron | no fix listed | UBUNTU-CVE-2024-53916 |
Affected products (as reported)
Weakness: CWE-754 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
References
- https://review.opendev.org/c/openstack/neutron/+/935883
- https://review.opendev.org/q/project:openstack/neutron
- https://github.com/openstack/neutron/blob/363ffa6e9e1ab5968f87d45bc2f1cb6394f48b9f/neutron/extensions/tagging.py#L138-L232
- https://security.openstack.org/ossa/OSSA-2024-005.html
- http://www.openwall.com/lists/oss-security/2024/12/03/1