CVE-2014-4167
Fixed in a distro release EPSS 2%
The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an IPv6 private subnet to a L3 router.
Products: openstack neutron, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | neutron | 2014.1.1-1 |
| Debian 13 | neutron | 2014.1.1-1 |
| Debian 14 | neutron | 2014.1.1-1 |
| Red Hat openstack 4 | openstack-neutron | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-bigswitch | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-brocade | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-cisco | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-hyperv | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-linuxbridge | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-mellanox | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-metaplugin | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-metering-agent | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-midonet | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-ml2 | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-nec | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-nicira | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-openvswitch | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-plumgrid | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-ryu | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | openstack-neutron-vpn-agent | 0:2013.2.3-14.el6ost |
| Red Hat openstack 4 | python-neutron | 0:2013.2.3-14.el6ost |
| Ubuntu 14.04 LTS | neutron | 1:2014.1-0ubuntu1.3 |