Comment 2 for bug 1322945

Revision history for this message
Thiago Martins (martinx) wrote : Re: [Bug 1322945] Re: Attaching a IPv6 private subnet to a L3 Router, breaks it and its IPv4 Floating IPs

Okay, no problem... I've marked it as a security issue mostly because a
regular OpenStack user can break the Network Node and affect everybody else
on the same node / region / az... So, it is a big risk for Public Cloud
providers based on IceHouse using this topology (Neutron L3 / GRE / VXLAN).

The "VLAN Provider Networks" (or Flat Networks) aren't affected.

Best,
Thiago

On 26 May 2014 15:19, Jeremy Stanley <email address hidden> wrote:

> Since you mention this may be a security vulnerability (potential denial
> of service attack) in a supported release, I've switched the bug from
> public to public security and added an OSSA task in case it warrants an
> advisory.
>
> ** Information type changed from Public to Public Security
>
> ** Also affects: ossa
> Importance: Undecided
> Status: New
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1322945
>
> Title:
> Attaching a IPv6 private subnet to a L3 Router, breaks it and its IPv4
> Floating IPs
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/neutron/+bug/1322945/+subscriptions
>