← Back

CVE-2014-0187

nvd nist
Published: Apr 28, 2014Modified: May 6, 2026

JSON object

Loading...
9.0
Vector
AV:N/AC:L/Au:S/C:C/I:C/A:C
Exploitability: 8.0 / Impact: 10.0
Source: NVD

Description

The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied.

Affected (14)

Openstack
1 product
Neutron
Canonical
1 product
Ubuntu Linux
Opensuse
1 product
Opensuse
Configuration A
11 vulnerable
Vulnerable SoftwareAffected Versions
Openstack
Neutron
Version 2013.1.1
Neutron
Version 2013.1.2
Neutron
Version 2013.1.3
Neutron
Version 2013.1.4
Neutron
Version 2013.1.5
Neutron
Version 2013.1
Neutron
Version 2013.2.1
Neutron
Version 2013.2.2
Neutron
Version 2013.2.3
Neutron
Version 2013.2
Neutron
Version 2014.1
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 13.04
Ubuntu Linux
Version 14.04
Opensuse
Version 13.1

Related CWEs

CWE-264
CWE-264

References (10)

Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.