CVE-2014-7821

MITTEL 4.0CVE-2014-7821 · Published 24/11/2014 · updated 17/06/2026

Kurz gesagt

CVE-2014-7821 ist eine Schwachstelle (MITTEL (CVSS 4.0)) in neutron (openstack), openstack (redhat).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 3.9%, höher als bei 90.4% aller Schwachstellen.
Abhilfe: auf 2014.1.4, 2014.2.1 oder neuer aktualisieren.

Package	Affected versions	Patched versions
neutron openstack	`≥ 2012.2.1, < 2014.1.4≥ 2014.2, < 2014.2.1`	`2014.1.42014.2.1`
openstack redhat	`= 4.0`	No fix yet

Description

OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (crash) via a crafted dns_nameservers value in the DNS configuration.

References

lists.fedoraproject.org/pipermail/package-announce/2015-April/155351.html · Third Party Advisory
lists.openstack.org/pipermail/openstack-announce/2014-November/000303.html · Patch
rhn.redhat.com/errata/RHSA-2014-1938.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2014-1942.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2015-0044.html · Third Party Advisory
secunia.com/advisories/62586 · Third Party Advisory
oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html · Third Party Advisory
bugs.launchpad.net/neutron/+bug/1378450 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/98818 · Third Party Advisory

Weitere Schwachstellen in neutron

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

neutron

openstack

≥ 2012.2.1, < 2014.1.4≥ 2014.2, < 2014.2.1

2014.1.42014.2.1

openstack

redhat

= 4.0

No fix yet

Weitere Schwachstellen in neutron

Alle anzeigen →