CVE-2014-4167: Low severity Openstack Neutron vulnerability
Published Jul 11, 2014
·Updated
The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an IPv6 private subnet to a L3 router.
Affected Software
5 affected components
Openstack Neutron>=2011.1<=2013.2.3
Openstack Neutron=2014.1
Openstack Neutron=2014.1.1
Canonical Ubuntu Linux=13.10
Canonical Ubuntu Linux=14.04
Event History
Jul 11, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-4167?
CVE-2014-4167 has a medium severity rating as it allows denial of service through a misconfiguration.
2
How do I fix CVE-2014-4167?
To fix CVE-2014-4167, upgrade OpenStack Neutron to version 2013.2.4, 2014.1.2, or later.
3
Who is affected by CVE-2014-4167?
CVE-2014-4167 affects users of OpenStack Neutron versions prior to 2013.2.4 and 2014.x before 2014.1.2.
4
What type of vulnerability is CVE-2014-4167?
CVE-2014-4167 is classified as a denial of service vulnerability.
5
Can CVE-2014-4167 be exploited remotely?
Yes, CVE-2014-4167 can be exploited by remote authenticated users to cause service disruption.