CVE-2014-3555: Medium severity neutron vulnerability
OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (crash or long firewall rule updates) by creating a large number of allowed address pairs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3555?
CVE-2014-3555 is classified as a high severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2014-3555?
To fix CVE-2014-3555, update OpenStack Neutron to version 2013.2.4, 2014.1.2, or later versions.
Who is affected by CVE-2014-3555?
CVE-2014-3555 affects users of OpenStack Neutron versions prior to 2013.2.4, 2014.x before 2014.1.2, and the Juno release before Juno-2.
What type of attack does CVE-2014-3555 facilitate?
CVE-2014-3555 facilitates a denial of service attack by allowing remote authenticated users to create excessive firewall rule updates.
When was CVE-2014-3555 disclosed?
CVE-2014-3555 was disclosed in July 2014.