Every CVESearch/Get API key

CVE-2014-0187

The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014...

9.0 HighFix available

CVE-2014-0187 is a high vulnerability (CVSS 9.0) in Openstack Neutron, published April 28, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.00%, the 87th percentile. Fixed in neutron 2014.1.2-1.

What does this mean?
Severity
9.0 HighCVSS 2.0, NVD
Exploit chance
3.00%EPSS, 87th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
2014.1.2-1neutron +22 more

Description

The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied.

Exploit likelihood

3.00%Up 1.9 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
neutron
Debian:12
before 2014.1.2-1
2014.1.2-1
neutron
Debian:13
before 2014.1.2-1
2014.1.2-1
neutron
Debian:14
before 2014.1.2-1
2014.1.2-1
openstack-neutron
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-bigswitch
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-brocade
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-cisco
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-hyperv
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-linuxbridge
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-mellanox
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
Show 13 moreShow less
Affected packages
PackageAffectedFixed
openstack-neutron-metaplugin
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-metering-agent
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-midonet
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-ml2
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-nec
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-nicira
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-openvswitch
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-plumgrid
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-ryu
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
openstack-neutron-vpn-agent
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
python-neutron
Red Hat:openstack:4::el6
From an advisory covering 2 CVEs
before 0:2013.2.3-14.el6ost
0:2013.2.3-14.el6ost
neutron
Ubuntu:14.04:LTS
before 1:2014.1-0ubuntu1.3, plus listed versions
1:2013.2~rc3-0ubuntu11:2013.2-0ubuntu11:2014.1~b1-0ubuntu11:2014.1~b2-0ubuntu21:2014.1~b2-0ubuntu4
Show 7 moreShow less
1:2014.1~b2-0ubuntu61:2014.1~b3-0ubuntu11:2014.1~rc1-0ubuntu11:2014.1~rc2-0ubuntu11:2014.1~rc2-0ubuntu31:2014.1~rc2-0ubuntu41:2014.1-0ubuntu1
1:2014.1-0ubuntu1.3
neutron
Ubuntu:14.04:LTS
From an advisory covering 3 CVEs
before 1:2014.1-0ubuntu1.3, plus listed versions
1:2013.2~rc3-0ubuntu11:2013.2-0ubuntu11:2014.1~b1-0ubuntu11:2014.1~b2-0ubuntu21:2014.1~b2-0ubuntu4
Show 7 moreShow less
1:2014.1~b2-0ubuntu61:2014.1~b3-0ubuntu11:2014.1~rc1-0ubuntu11:2014.1~rc2-0ubuntu11:2014.1~rc2-0ubuntu31:2014.1~rc2-0ubuntu41:2014.1-0ubuntu1
1:2014.1-0ubuntu1.3

What each source reports

NVD Score used9.0

The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied.

Record
CVE-2014-0187
CVSS 2.0
9.0 HighAV:N/AC:L/Au:S/C:C/I:C/A:C
Weakness
CWE-264
Updated
2026-11-02
CVE ListNo score

The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied.

Record
CVE-2014-0187
Updated
2026-11-02
EUVDEUVD-2014-0239No score

The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied.

Record
EUVD-2014-0239
Updated
2026-11-03
GitHub AdvisoriesGHSA-x3fg-cp39-r4h6No score

The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014...

The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied.

Record
GHSA-x3fg-cp39-r4h6
Updated
2026-11-02
OSVNo score

The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied.

Record
CVE-2014-0187
Updated
2026-11-02
OSVDEBIAN-CVE-2014-0187No score

The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied.

Record
DEBIAN-CVE-2014-0187
Updated
2026-11-02
OSVUBUNTU-CVE-2014-0187No score

The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied.

Record
UBUNTU-CVE-2014-0187
Updated
2026-11-02
OSVUSN-2255-1No score

neutron vulnerabilities

Darragh O'Reilly discovered that the Ubuntu packaging for OpenStack Neutron did not properly set up its sudo configuration. If a different flaw was found in OpenStack Neutron, this vulnerability could be used to escalate privileges. (CVE-2013-6433)

Stephen Ma and Christoph Thiel discovered that the openvswitch-agent in OpenStack Neutron did not properly perform input validation when creating security group rules when specifying --remote-ip-prefix. A remote authenticated attacker could exploit this to prevent application of additional rules. (CVE-2014-0187)

Thiago Martins discovered that OpenStack Neutron would inappropriately apply SNAT rules to IPv6 subnets when using the L3-agent. A remote authenticated attacker could exploit this to prevent floating IPv4 addresses from being attached throughout the cloud. (CVE-2014-4167)

Record
USN-2255-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 18 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open