CVE-2014-4167

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-07-11 · updated 2026-06-17
Weakness: CWE-264

Description

The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an IPv6 private subnet to a L3 router.

Affected products

Canonical Ubuntu Linux: 13.10, 14.04
OpenStack Neutron: from 2011.1 through 2013.2.3; 2014.1, 2014.1.1

References

http://seclists.org/oss-sec/2014/q2/572
http://secunia.com/advisories/59533
http://www.ubuntu.com/usn/USN-2255-1
https://bugs.launchpad.net/neutron/+bug/1309195
http://seclists.org/oss-sec/2014/q2/572
http://secunia.com/advisories/59533
http://www.ubuntu.com/usn/USN-2255-1
https://bugs.launchpad.net/neutron/+bug/1309195

Get alerted when CVE-2014-4167 or the next vulnerability affects your stack