Vulnerabilities (CVE)

Filtered by vendor Openstack Subscribe
Filtered by product Neutron
Total 25 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-0056 2 Canonical, Openstack 2 Ubuntu Linux, Neutron 2024-02-28 2.1 LOW N/A
The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports into the routers of arbitrary tenants via the device id in a port-create command.
CVE-2014-3555 1 Openstack 1 Neutron 2024-02-28 4.0 MEDIUM N/A
OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (crash or long firewall rule updates) by creating a large number of allowed address pairs.
CVE-2014-8153 2 Litech, Openstack 2 Router Advertisement Daemon, Neutron 2024-02-28 4.0 MEDIUM N/A
The L3 agent in OpenStack Neutron 2014.2.x before 2014.2.2, when using radvd 2.0+, allows remote authenticated users to cause a denial of service (blocked router update processing) by creating eight routers and assigning an ipv6 non-provider subnet to each.
CVE-2014-7821 3 Fedoraproject, Openstack, Redhat 3 Fedora, Neutron, Openstack 2024-02-28 4.0 MEDIUM N/A
OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (crash) via a crafted dns_nameservers value in the DNS configuration.
CVE-2014-6414 2 Canonical, Openstack 2 Ubuntu Linux, Neutron 2024-02-28 4.0 MEDIUM N/A
OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to set admin network attributes to default values via unspecified vectors.