CVE-2024-53916

Name	CVE-2024-53916
Description	In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant is able to change (add and clear) tags on network objects that do not belong to the tenant, and this action is not subjected to the proper policy authorization check. This affects 23 before 23.2.1, 24 before 24.0.2, and 25 before 25.0.1.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	1088802

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
neutron (PTS)	jessie	2014.1.3-12	vulnerable
	stretch (security), stretch (lts), stretch	2:9.1.1-3+deb9u3	vulnerable
	buster (security), buster, buster (lts)	2:13.0.7+git.2021.09.27.bace3d1890-0+deb10u1	vulnerable
	bullseye (security), bullseye	2:17.2.1-0+deb11u1	fixed
	bookworm	2:21.0.0-7	fixed
	trixie	2:25.0.0-3	fixed
	sid	2:25.0.0-4	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Debian Bugs
neutron	source	jessie	(unfixed)	end-of-life
neutron	source	stretch	(unfixed)	end-of-life
neutron	source	buster	(unfixed)	end-of-life
neutron	source	bullseye	(not affected)
neutron	source	bookworm	(not affected)
neutron	source	(unstable)	2:25.0.0-2		1088802

Notes

[bookworm] - neutron <not-affected> (Vulnerable code not present)
[bullseye] - neutron <not-affected> (Vulnerable code not present)
https://review.opendev.org/c/openstack/neutron/+/935883
Introduced in https://opendev.org/openstack/neutron/commit/f9b91289a5c2948429e69e1b58098cec846fba99
https://www.openwall.com/lists/oss-security/2024/12/03/1