Unscored severity · published May 8, 2014
CVE-2014-0056
The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports into the routers…
–
CVSS
1.4%
EPSS
No
On KEV
Description
The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports into the routers of arbitrary tenants via the device id in a port-create command.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Neutron · Openstack
2012.2; 2012.2.1; 2012.2.2; 2012.2.3; 2012.2.4; 2013.1; +8 more · source: NVD
UL
Ubuntu Linux · Canonical
13.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-0056
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-0056
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2014-0516.html
www.openwall.com
http://www.openwall.com/lists/oss-security/2014/03/27/5
www.ubuntu.com
http://www.ubuntu.com/usn/USN-2194-1
bugs.launchpad.net
https://bugs.launchpad.net/neutron/+bug/1243327
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation