CVE

Id
67596  
CVE No.
CVE-2014-0187  
Status
Candidate  
Description
The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied.  
Phase
Assigned (20131203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
651951 67596 CVE-2014-0187 MLIST:[oss-security] 20140422 [OSSA 2014-014] Neutron security groups bypass through invalid CIDR (CVE-2014-0187)  View
651952 67596 CVE-2014-0187 URL:http://www.openwall.com/lists/oss-security/2014/04/22/8  View
651953 67596 CVE-2014-0187 CONFIRM:https://bugs.launchpad.net/neutron/+bug/1300785  View
651954 67596 CVE-2014-0187 SUSE:openSUSE-SU-2014:1051  View
651955 67596 CVE-2014-0187 URL:http://lists.opensuse.org/opensuse-updates/2014-08/msg00035.html  View
651956 67596 CVE-2014-0187 UBUNTU:USN-2255-1  View
651957 67596 CVE-2014-0187 URL:http://www.ubuntu.com/usn/USN-2255-1  View
651958 67596 CVE-2014-0187 SECUNIA:59533  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13890 JVNDB-2014-002765 OpenSSL の d1_both.c の dtls1_reassemble_fragment 関数における任意のコードを実行される脆弱性 OpenSSL の d1_both.c の dtls1_reassemble_fragment 関数は、DTLS ClientHello メッセージのフラグメントの長さを適切に検証しないため、任意のコードを実行される、またはサービス運用妨害 (バッファオーバーフローおよびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-0195 67596 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002765.html  View