Every CVESearch/Get API key

CVE-2014-4167

The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2...

3.5 LowFix available

CVE-2014-4167 is a low vulnerability (CVSS 3.5) in Openstack Neutron, published June 18, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.66%, the 77th percentile. Fixed in neutron 2014.1.1-1.

What does this mean?
Severity
3.5 LowCVSS 2.0, NVD
Exploit chance
1.66%EPSS, 77th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
2014.1.1-1neutron +22 more

Description

The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an IPv6 private subnet to a L3 router.

Exploit likelihood

1.66%Up 0.5 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
neutron
Debian:12
before 2014.1.1-1
2014.1.1-1
neutron
Debian:13
before 2014.1.1-1
2014.1.1-1
neutron
Debian:14
before 2014.1.1-1
2014.1.1-1
openstack-neutron
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-bigswitch
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-brocade
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-cisco
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-hyperv
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-linuxbridge
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-mellanox
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
Show 13 moreShow less
Affected packages
PackageAffectedFixed
openstack-neutron-metaplugin
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-metering-agent
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-midonet
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-ml2
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-nec
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-nicira
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-openvswitch
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-plumgrid
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-ryu
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-vpn-agent
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
python-neutron
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
neutron
Ubuntu:14.04:LTS
before 1:2014.1-0ubuntu1.3, plus listed versions
1:2013.2~rc3-0ubuntu11:2013.2-0ubuntu11:2014.1~b1-0ubuntu11:2014.1~b2-0ubuntu21:2014.1~b2-0ubuntu4
Show 7 moreShow less
1:2014.1~b2-0ubuntu61:2014.1~b3-0ubuntu11:2014.1~rc1-0ubuntu11:2014.1~rc2-0ubuntu11:2014.1~rc2-0ubuntu31:2014.1~rc2-0ubuntu41:2014.1-0ubuntu1
1:2014.1-0ubuntu1.3
neutron
Ubuntu:14.04:LTS
From an advisory covering 3 CVEs
before 1:2014.1-0ubuntu1.3, plus listed versions
1:2013.2~rc3-0ubuntu11:2013.2-0ubuntu11:2014.1~b1-0ubuntu11:2014.1~b2-0ubuntu21:2014.1~b2-0ubuntu4
Show 7 moreShow less
1:2014.1~b2-0ubuntu61:2014.1~b3-0ubuntu11:2014.1~rc1-0ubuntu11:2014.1~rc2-0ubuntu11:2014.1~rc2-0ubuntu31:2014.1~rc2-0ubuntu41:2014.1-0ubuntu1
1:2014.1-0ubuntu1.3

What each source reports

NVD Score used3.5

The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an IPv6 private subnet to a L3 router.

Record
CVE-2014-4167
CVSS 2.0
3.5 LowAV:N/AC:M/Au:S/C:N/I:N/A:P
Weakness
CWE-264
Updated
2026-11-02
CVE ListNo score

The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an IPv6 private subnet to a L3 router.

Record
CVE-2014-4167
Updated
2026-11-02
EUVDEUVD-2014-4098No score

The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an IPv6 private subnet to a L3 router.

Record
EUVD-2014-4098
Updated
2026-11-03
GitHub AdvisoriesGHSA-r7cp-gqhf-qm59No score

The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2...

The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an IPv6 private subnet to a L3 router.

Record
GHSA-r7cp-gqhf-qm59
Updated
2026-11-02
OSVNo score

The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an IPv6 private subnet to a L3 router.

Record
CVE-2014-4167
Updated
2026-11-02
OSVDEBIAN-CVE-2014-4167No score

The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an IPv6 private subnet to a L3 router.

Record
DEBIAN-CVE-2014-4167
Updated
2026-11-02
OSVUBUNTU-CVE-2014-4167No score

The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an IPv6 private subnet to a L3 router.

Record
UBUNTU-CVE-2014-4167
Updated
2026-11-02
OSVUSN-2255-1No score

neutron vulnerabilities

Darragh O'Reilly discovered that the Ubuntu packaging for OpenStack Neutron did not properly set up its sudo configuration. If a different flaw was found in OpenStack Neutron, this vulnerability could be used to escalate privileges. (CVE-2013-6433)

Stephen Ma and Christoph Thiel discovered that the openvswitch-agent in OpenStack Neutron did not properly perform input validation when creating security group rules when specifying --remote-ip-prefix. A remote authenticated attacker could exploit this to prevent application of additional rules. (CVE-2014-0187)

Thiago Martins discovered that OpenStack Neutron would inappropriately apply SNAT rules to IPv6 subnets when using the L3-agent. A remote authenticated attacker could exploit this to prevent floating IPv4 addresses from being attached throughout the cloud. (CVE-2014-4167)

Record
USN-2255-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 17 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open