CVE-2014-7821
OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users...
4.0 MediumFix available
CVE-2014-7821 is a medium vulnerability (CVSS 4.0) in Openstack Neutron, published November 24, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.94%, the 90th percentile. Fixed in neutron 2014.1.3-6.
- Severity
- 4.0 MediumCVSS 2.0, NVD
- Exploit chance
- 3.94%EPSS, 90th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2014.1.3-6neutron +66 more
Description
OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (crash) via a crafted dns_nameservers value in the DNS configuration.
Exploit likelihood
3.94%Up 2.3 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
neutronDebian:12 | before 2014.1.3-6 | 2014.1.3-6 |
neutronDebian:13 | before 2014.1.3-6 | 2014.1.3-6 |
neutronDebian:14 | before 2014.1.3-6 | 2014.1.3-6 |
openstack-neutronRed Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
openstack-neutron-bigswitchRed Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
openstack-neutron-brocadeRed Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
openstack-neutron-ciscoRed Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
openstack-neutron-embraneRed Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
openstack-neutron-hypervRed Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
openstack-neutron-ibmRed Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
Show 57 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openstack-neutron-linuxbridgeRed Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
openstack-neutron-mellanoxRed Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
openstack-neutron-metapluginRed Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
openstack-neutron-metering-agentRed Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
openstack-neutron-midonetRed Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
openstack-neutron-ml2Red Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
openstack-neutron-necRed Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
openstack-neutron-nuageRed Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
openstack-neutron-ofagentRed Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
openstack-neutron-oneconvergence-nvsdRed Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
openstack-neutron-openvswitchRed Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
openstack-neutron-plumgridRed Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
openstack-neutron-ryuRed Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
openstack-neutron-vmwareRed Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
openstack-neutron-vpn-agentRed Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
python-neutronRed Hat:openstack:5::el6 | before 0:2014.1.3-12.el6ost | 0:2014.1.3-12.el6ost |
openstack-neutronRed Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
openstack-neutron-bigswitchRed Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
openstack-neutron-brocadeRed Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
openstack-neutron-ciscoRed Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
openstack-neutron-embraneRed Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
openstack-neutron-hypervRed Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
openstack-neutron-ibmRed Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
openstack-neutron-linuxbridgeRed Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
openstack-neutron-mellanoxRed Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
openstack-neutron-metapluginRed Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
openstack-neutron-metering-agentRed Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
openstack-neutron-midonetRed Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
openstack-neutron-ml2Red Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
openstack-neutron-necRed Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
openstack-neutron-nuageRed Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
openstack-neutron-ofagentRed Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
openstack-neutron-oneconvergence-nvsdRed Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
openstack-neutron-openvswitchRed Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
openstack-neutron-plumgridRed Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
openstack-neutron-ryuRed Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
openstack-neutron-vmwareRed Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
openstack-neutron-vpn-agentRed Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
python-neutronRed Hat:openstack:5::el7 | before 0:2014.1.3-11.el7ost | 0:2014.1.3-11.el7ost |
openstack-neutronRed Hat:openstack:4::el6 | before 0:2013.2.4-6.el6ost | 0:2013.2.4-6.el6ost |
openstack-neutron-bigswitchRed Hat:openstack:4::el6 | before 0:2013.2.4-6.el6ost | 0:2013.2.4-6.el6ost |
openstack-neutron-brocadeRed Hat:openstack:4::el6 | before 0:2013.2.4-6.el6ost | 0:2013.2.4-6.el6ost |
openstack-neutron-ciscoRed Hat:openstack:4::el6 | before 0:2013.2.4-6.el6ost | 0:2013.2.4-6.el6ost |
openstack-neutron-hypervRed Hat:openstack:4::el6 | before 0:2013.2.4-6.el6ost | 0:2013.2.4-6.el6ost |
openstack-neutron-linuxbridgeRed Hat:openstack:4::el6 | before 0:2013.2.4-6.el6ost | 0:2013.2.4-6.el6ost |
openstack-neutron-mellanoxRed Hat:openstack:4::el6 | before 0:2013.2.4-6.el6ost | 0:2013.2.4-6.el6ost |
openstack-neutron-metapluginRed Hat:openstack:4::el6 | before 0:2013.2.4-6.el6ost | 0:2013.2.4-6.el6ost |
openstack-neutron-metering-agentRed Hat:openstack:4::el6 | before 0:2013.2.4-6.el6ost | 0:2013.2.4-6.el6ost |
openstack-neutron-midonetRed Hat:openstack:4::el6 | before 0:2013.2.4-6.el6ost | 0:2013.2.4-6.el6ost |
openstack-neutron-ml2Red Hat:openstack:4::el6 | before 0:2013.2.4-6.el6ost | 0:2013.2.4-6.el6ost |
openstack-neutron-necRed Hat:openstack:4::el6 | before 0:2013.2.4-6.el6ost | 0:2013.2.4-6.el6ost |
openstack-neutron-niciraRed Hat:openstack:4::el6 | before 0:2013.2.4-6.el6ost | 0:2013.2.4-6.el6ost |
openstack-neutron-openvswitchRed Hat:openstack:4::el6 | before 0:2013.2.4-6.el6ost | 0:2013.2.4-6.el6ost |
openstack-neutron-plumgridRed Hat:openstack:4::el6 | before 0:2013.2.4-6.el6ost | 0:2013.2.4-6.el6ost |
openstack-neutron-ryuRed Hat:openstack:4::el6 | before 0:2013.2.4-6.el6ost | 0:2013.2.4-6.el6ost |
openstack-neutron-vpn-agentRed Hat:openstack:4::el6 | before 0:2013.2.4-6.el6ost | 0:2013.2.4-6.el6ost |
python-neutronRed Hat:openstack:4::el6 | before 0:2013.2.4-6.el6ost | 0:2013.2.4-6.el6ost |
What each source reports
NVD Score used
OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (crash) via a crafted dns_nameservers value in the DNS configuration.
- Record
CVE-2014-7821- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Weakness
- CWE-20, CWE-399
- Updated
- 2026-11-02
CVE ListNo score
OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (crash) via a crafted dns_nameservers value in the DNS configuration.
- Record
CVE-2014-7821- Updated
- 2026-11-02
EUVDEUVD-2014-7687No score
OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (crash) via a crafted dns_nameservers value in the DNS configuration.
- Record
EUVD-2014-7687- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3v86-wqpm-qc9xNo score
OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users...
OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (crash) via a crafted dns_nameservers value in the DNS configuration.
- Record
GHSA-3v86-wqpm-qc9x- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVNo score
OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (crash) via a crafted dns_nameservers value in the DNS configuration.
- Record
CVE-2014-7821- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-7821No score
OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (crash) via a crafted dns_nameservers value in the DNS configuration.
- Record
DEBIAN-CVE-2014-7821- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
rhn.redhat.com/errata/RHSA-2014-1938.html
exchange.xforce.ibmcloud.com/vulnerabilities/98818
lists.fedoraproject.org/pipermail/package-announce/2015-April/155351.html
oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
lists.openstack.org/pipermail/openstack-announce/2014-November/000303.html
Show 21 moreShow less
secunia.com/advisories/62586
bugs.launchpad.net/neutron/+bug/1378450
nvd.nist.gov/vuln/detail/CVE-2014-7821
access.redhat.com/errata/RHSA-2014:1938
bugzilla.redhat.com/show_bug.cgi?id=1163457
github.com/advisories/GHSA-3v86-wqpm-qc9x
security-tracker.debian.org/tracker/CVE-2014-7821
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1938.json
cve.org/CVERecord?id=CVE-2014-7821