Unscored severity · published Apr 4, 2014
CVE-2014-0592
Barclamp (aka barclamp-network) 1.7 for the Crowbar Framework, as used in SUSE Cloud 3, does not enable netfilter on bridges when creating new instances, which allows remote…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Barclamp (aka barclamp-network) 1.7 for the Crowbar Framework, as used in SUSE Cloud 3, does not enable netfilter on bridges when creating new instances, which allows remote attackers to bypass security group restrictions via unspecified vectors, related to floating IPs.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BA
Barclamp · Crowbar
1.7 · source: NVD
SC
Suse Cloud · Novell
3.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-0592
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-0592
Patch
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00025.html
Vendor Advisory
http://secunia.com/advisories/57509
www.securityfocus.com
http://www.securityfocus.com/bid/66519
bugzilla.novell.com
https://bugzilla.novell.com/show_bug.cgi?id=864183
github.com
https://github.com/crowbar/barclamp-network/pull/269