CVE-2013-6433
Fixed in a distro release EPSS 3%
The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootwrap, which allows remote attackers to gain privileges via a crafted configuration file.
Products: openstack neutron, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | neutron | 2014.1-1 |
| Debian 13 | neutron | 2014.1-1 |
| Debian 14 | neutron | 2014.1-1 |
| Red Hat openstack 4 | openstack-neutron | 0:2013.2.3-7.el6ost |
| Red Hat openstack 4 | openstack-neutron-bigswitch | 0:2013.2.3-7.el6ost |
| Red Hat openstack 4 | openstack-neutron-brocade | 0:2013.2.3-7.el6ost |
| Red Hat openstack 4 | openstack-neutron-cisco | 0:2013.2.3-7.el6ost |
| Red Hat openstack 4 | openstack-neutron-hyperv | 0:2013.2.3-7.el6ost |
| Red Hat openstack 4 | openstack-neutron-linuxbridge | 0:2013.2.3-7.el6ost |
| Red Hat openstack 4 | openstack-neutron-mellanox | 0:2013.2.3-7.el6ost |
| Red Hat openstack 4 | openstack-neutron-metaplugin | 0:2013.2.3-7.el6ost |
| Red Hat openstack 4 | openstack-neutron-metering-agent | 0:2013.2.3-7.el6ost |
| Red Hat openstack 4 | openstack-neutron-midonet | 0:2013.2.3-7.el6ost |
| Red Hat openstack 4 | openstack-neutron-ml2 | 0:2013.2.3-7.el6ost |
| Red Hat openstack 4 | openstack-neutron-nec | 0:2013.2.3-7.el6ost |
| Red Hat openstack 4 | openstack-neutron-nicira | 0:2013.2.3-7.el6ost |
| Red Hat openstack 4 | openstack-neutron-openvswitch | 0:2013.2.3-7.el6ost |
| Red Hat openstack 4 | openstack-neutron-plumgrid | 0:2013.2.3-7.el6ost |
| Red Hat openstack 4 | openstack-neutron-ryu | 0:2013.2.3-7.el6ost |
| Red Hat openstack 4 | openstack-neutron-vpn-agent | 0:2013.2.3-7.el6ost |
| Red Hat openstack 4 | python-neutron | 0:2013.2.3-7.el6ost |
| Ubuntu 14.04 LTS | neutron | 1:2014.1-0ubuntu1.3 |