CVE-2014-3632
Fixed in a distro release EPSS 3%
The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allows remote attackers to gain privileges via a crafted configuration file. NOTE: this vulnerability exists because of a CVE-2013-6433 regression.
Products: openstack neutron
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openstack 5 | openstack-neutron | 0:2014.1.2-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-bigswitch | 0:2014.1.2-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-brocade | 0:2014.1.2-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-cisco | 0:2014.1.2-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-hyperv | 0:2014.1.2-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-ibm | 0:2014.1.2-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-linuxbridge | 0:2014.1.2-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-mellanox | 0:2014.1.2-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-metaplugin | 0:2014.1.2-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-metering-agent | 0:2014.1.2-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-midonet | 0:2014.1.2-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-ml2 | 0:2014.1.2-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-nec | 0:2014.1.2-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-ofagent | 0:2014.1.2-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-oneconvergence-nvsd | 0:2014.1.2-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-openvswitch | 0:2014.1.2-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-plumgrid | 0:2014.1.2-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-ryu | 0:2014.1.2-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-vmware | 0:2014.1.2-4.el6ost |
| Red Hat openstack 5 | openstack-neutron-vpn-agent | 0:2014.1.2-4.el6ost |
| Red Hat openstack 5 | python-neutron | 0:2014.1.2-4.el6ost |