VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 28, 2014· Updated Jun 17, 2026

CVE-2014-0187

CVE-2014-0187

Description

The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

15
  • OpenStack/Neutron11 versions
    cpe:2.3:a:openstack:neutron:2013.1:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:openstack:neutron:2013.1:*:*:*:*:*:*:*
    • cpe:2.3:a:openstack:neutron:2013.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:openstack:neutron:2013.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:openstack:neutron:2013.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:openstack:neutron:2013.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:openstack:neutron:2013.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:openstack:neutron:2013.2:*:*:*:*:*:*:*
    • cpe:2.3:a:openstack:neutron:2013.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:openstack:neutron:2013.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:openstack:neutron:2013.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:openstack:neutron:2014.1:*:*:*:*:*:*:*
  • Canonical/Ubuntu Linux2 versions
    cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
  • OpenSUSE/openSUSE
    cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
  • Neutron/Neutronllm-create
    Range: >=2013.1,<2013.2.4 | >=2014.1,<2014.1.1

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.