CVE-2014-3632
The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014...
The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allows remote attackers to gain privileges via a crafted configuration file. NOTE: this vulnerability exists because of a CVE-2013-6433 regression.
Exploit likelihood
What each source reports
NVD Score used
The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allows remote attackers to gain privileges via a crafted configuration file. NOTE: this vulnerability exists because of a CVE-2013-6433 regression.
- Record
CVE-2014-3632- CVSS 2.0
- 7.6 High
AV:N/AC:H/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allows remote attackers to gain privileges via a crafted configuration file. NOTE: this vulnerability exists because of a CVE-2013-6433 regression.
- Record
CVE-2014-3632- Updated
- 2026-11-02
EUVDEUVD-2014-3590 No score
The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allows remote attackers to gain privileges via a crafted configuration file. NOTE: this vulnerability exists because of a CVE-2013-6433 regression.
- Record
EUVD-2014-3590- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hr9q-fc36-qcfj No score
The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014...
The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allows remote attackers to gain privileges via a crafted configuration file. NOTE: this vulnerability exists because of a CVE-2013-6433 regression.
- Record
GHSA-hr9q-fc36-qcfj- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openstack-neutronRed Hat:openstack:5::el6 |
before 0:2014.1.2-4.el6ost | 0:2014.1.2-4.el6ost |
openstack-neutron-bigswitchRed Hat:openstack:5::el6 |
before 0:2014.1.2-4.el6ost | 0:2014.1.2-4.el6ost |
openstack-neutron-brocadeRed Hat:openstack:5::el6 |
before 0:2014.1.2-4.el6ost | 0:2014.1.2-4.el6ost |
openstack-neutron-ciscoRed Hat:openstack:5::el6 |
before 0:2014.1.2-4.el6ost | 0:2014.1.2-4.el6ost |
openstack-neutron-hypervRed Hat:openstack:5::el6 |
before 0:2014.1.2-4.el6ost | 0:2014.1.2-4.el6ost |
openstack-neutron-ibmRed Hat:openstack:5::el6 |
before 0:2014.1.2-4.el6ost | 0:2014.1.2-4.el6ost |
openstack-neutron-linuxbridgeRed Hat:openstack:5::el6 |
before 0:2014.1.2-4.el6ost | 0:2014.1.2-4.el6ost |
openstack-neutron-mellanoxRed Hat:openstack:5::el6 |
before 0:2014.1.2-4.el6ost | 0:2014.1.2-4.el6ost |
openstack-neutron-metapluginRed Hat:openstack:5::el6 |
before 0:2014.1.2-4.el6ost | 0:2014.1.2-4.el6ost |
openstack-neutron-metering-agentRed Hat:openstack:5::el6 |
before 0:2014.1.2-4.el6ost | 0:2014.1.2-4.el6ost |
Show 11 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openstack-neutron-midonetRed Hat:openstack:5::el6 |
before 0:2014.1.2-4.el6ost | 0:2014.1.2-4.el6ost |
openstack-neutron-ml2Red Hat:openstack:5::el6 |
before 0:2014.1.2-4.el6ost | 0:2014.1.2-4.el6ost |
openstack-neutron-necRed Hat:openstack:5::el6 |
before 0:2014.1.2-4.el6ost | 0:2014.1.2-4.el6ost |
openstack-neutron-ofagentRed Hat:openstack:5::el6 |
before 0:2014.1.2-4.el6ost | 0:2014.1.2-4.el6ost |
openstack-neutron-oneconvergence-nvsdRed Hat:openstack:5::el6 |
before 0:2014.1.2-4.el6ost | 0:2014.1.2-4.el6ost |
openstack-neutron-openvswitchRed Hat:openstack:5::el6 |
before 0:2014.1.2-4.el6ost | 0:2014.1.2-4.el6ost |
openstack-neutron-plumgridRed Hat:openstack:5::el6 |
before 0:2014.1.2-4.el6ost | 0:2014.1.2-4.el6ost |
openstack-neutron-ryuRed Hat:openstack:5::el6 |
before 0:2014.1.2-4.el6ost | 0:2014.1.2-4.el6ost |
openstack-neutron-vmwareRed Hat:openstack:5::el6 |
before 0:2014.1.2-4.el6ost | 0:2014.1.2-4.el6ost |
openstack-neutron-vpn-agentRed Hat:openstack:5::el6 |
before 0:2014.1.2-4.el6ost | 0:2014.1.2-4.el6ost |
python-neutronRed Hat:openstack:5::el6 |
before 0:2014.1.2-4.el6ost | 0:2014.1.2-4.el6ost |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-3632 is a high vulnerability (CVSS 7.6) in Openstack Neutron, published October 7, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.50%, the 84th percentile. Fixed in openstack-neutron 0:2014.1.2-4.el6ost.