- EPSS 0.75%
- Published 19.08.2014 18:55:02
- Last modified 12.04.2025 10:46:40
The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain X_AUT...
- EPSS 1.02%
- Published 23.07.2014 14:55:05
- Last modified 12.04.2025 10:46:40
OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (crash or long firewall rule updates) by creating a large number of allowed address pairs.
CVE-2014-4167
- EPSS 0.56%
- Published 11.07.2014 14:55:04
- Last modified 12.04.2025 10:46:40
The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an IPv6 private subnet to a L3 router.
CVE-2013-6433
- EPSS 1.89%
- Published 02.06.2014 15:55:10
- Last modified 12.04.2025 10:46:40
The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootwrap, which allows remote attackers to gain privileges via a crafted configuration file.
CVE-2014-0056
- EPSS 0.22%
- Published 08.05.2014 14:29:12
- Last modified 12.04.2025 10:46:40
The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports into the routers of arbitrary tenants via the device id in a port-create command.
- EPSS 0.49%
- Published 28.04.2014 14:09:06
- Last modified 12.04.2025 10:46:40
The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules fr...