CVE-2014-0071
PackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to...
CVE-2014-0071 is a medium vulnerability (CVSS 6.4) in Redhat Openstack, published April 17, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.82%, the 78th percentile. Fixed in neutron 2014.1-1.
PackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to Neutron, which allows remote attackers to bypass intended access restrictions and make unauthorized connections.
Exploit likelihood
What each source reports
NVD Score used
PackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to Neutron, which allows remote attackers to bypass intended access restrictions and make unauthorized connections.
- Record
CVE-2014-0071- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
PackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to Neutron, which allows remote attackers to bypass intended access restrictions and make unauthorized connections.
- Record
CVE-2014-0071- Updated
- 2026-11-02
EUVDEUVD-2014-0164 No score
PackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to Neutron, which allows remote attackers to bypass intended access restrictions and make unauthorized connections.
- Record
EUVD-2014-0164- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c9wp-3wwr-qvrc No score
PackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to...
PackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to Neutron, which allows remote attackers to bypass intended access restrictions and make unauthorized connections.
- Record
GHSA-c9wp-3wwr-qvrc- Updated
- 2026-11-02
OSV No score
PackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to Neutron, which allows remote attackers to bypass intended access restrictions and make unauthorized connections.
- Record
CVE-2014-0071- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-0071 No score
PackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to Neutron, which allows remote attackers to bypass intended access restrictions and make unauthorized connections.
- Record
DEBIAN-CVE-2014-0071- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-0071 No score
PackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to Neutron, which allows remote attackers to bypass intended access restrictions and make unauthorized connections.
- Record
UBUNTU-CVE-2014-0071- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
neutronDebian:12 |
before 2014.1-1 | 2014.1-1 |
neutronDebian:13 |
before 2014.1-1 | 2014.1-1 |
neutronDebian:14 |
before 2014.1-1 | 2014.1-1 |
openstack-packstackRed Hat:openstack:4::el6 |
before 0:2013.2.1-0.25.dev987.el6ost | 0:2013.2.1-0.25.dev987.el6ost |
packstack-modules-puppetRed Hat:openstack:4::el6 |
before 0:2013.2.1-0.25.dev987.el6ost | 0:2013.2.1-0.25.dev987.el6ost |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | affected | |
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
securityfocus.com/bid/66001
rhn.redhat.com/errata/RHSA-2014-0233.html
bugzilla.redhat.com/show_bug.cgi?id=1064163
nvd.nist.gov/vuln/detail/CVE-2014-0071
github.com/advisories/GHSA-c9wp-3wwr-qvrc
security-tracker.debian.org/tracker/CVE-2014-0071
Show 16 moreShow less
access.redhat.com/errata/RHSA-2014:0233
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0233.json
cve.org/CVERecord?id=CVE-2014-0071
ubuntu.com/security/CVE-2014-0071