Lucene search
HistoryApr 28, 2014 - 2:09 p.m.
CVE-2014-0187
openvswitch-agent
openstack neutron
cve-2014-0187
security group
bypass
cidr
nvd
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
6.1 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.6%
The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied.
Affected configurations
Node
openstackneutronMatch2013.1
ORopenstackneutronMatch2013.1.1
ORopenstackneutronMatch2013.1.2
ORopenstackneutronMatch2013.1.3
ORopenstackneutronMatch2013.1.4
ORopenstackneutronMatch2013.1.5
ORopenstackneutronMatch2013.2
ORopenstackneutronMatch2013.2.1
ORopenstackneutronMatch2013.2.2
ORopenstackneutronMatch2013.2.3
ORopenstackneutronMatch2014.1
Node
canonicalubuntu_linuxMatch13.04
ORcanonicalubuntu_linuxMatch14.04lts
ORopensuseopensuseMatch13.1
Related
cvelist
cvelist
CVE-2014-0187
2014-04-28 14:00:00
prion
prion
Security feature bypass
2014-04-28 14:09:00
nessus
nessus
Fedora 20 : openstack-neutron-2013.2.3-7.fc20 (2014-6520)
2014-05-29 00:00:00
Ubuntu 14.04 LTS : OpenStack Neutron vulnerabilities (USN-2255-1)
2014-06-26 00:00:00
openvas
openvas
Fedora Update for openstack-neutron FEDORA-2014-6520
2014-06-02 00:00:00
Ubuntu: Security Advisory (USN-2255-1)
2014-07-01 00:00:00
debiancve
debiancve
CVE-2014-0187
2014-04-28 14:09:06
fedora
fedora
[SECURITY] Fedora 20 Update: openstack-neutron-2013.2.3-7.fc20
2014-05-28 23:52:42
veracode
veracode
Authorization Bypass
2019-01-15 08:56:39
Denial Of Service (DoS)
2019-05-02 05:03:30
nvd
nvd
CVE-2014-0187
2014-04-28 14:09:06
ubuntucve
ubuntucve
CVE-2014-0187
2014-04-28 00:00:00
redhat
redhat
ubuntu
ubuntu
OpenStack Neutron vulnerabilities
2014-06-25 00:00:00
securityvulns
securityvulns
OpenStack multiple security vulnerabilities
2014-08-24 00:00:00
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
6.1 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.6%
Related for CVE-2014-0187