CVE-2014-0187
Fixed in a distro release EPSS 3%
The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied.
Products: openstack neutron, canonical ubuntu_linux, opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | neutron | 2014.1.2-1 |
| Debian 13 | neutron | 2014.1.2-1 |
| Debian 14 | neutron | 2014.1.2-1 |
| Red Hat openstack 4 | openstack-neutron | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-bigswitch | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-brocade | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-cisco | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-hyperv | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-linuxbridge | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-mellanox | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-metaplugin | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-metering-agent | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-midonet | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-ml2 | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-nec | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-nicira | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-openvswitch | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-plumgrid | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-ryu | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-vpn-agent | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | python-neutron | 0:2013.2.3-14.el6ost |
| Ubuntu 14.04 LTS | neutron | 1:2014.1-0ubuntu1.3 |