Vulnerability Details : CVE-2014-3555
OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (crash or long firewall rule updates) by creating a large number of allowed address pairs.
Vulnerability category: Denial of service
Products affected by CVE-2014-3555
- cpe:2.3:a:openstack:neutron:2014.1:*:*:*:*:*:*:*
- cpe:2.3:a:openstack:neutron:2013.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:openstack:neutron:juno-1:*:*:*:*:*:*:*
- cpe:2.3:a:openstack:neutron:2014.1.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2014-3555
1.02%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 76 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2014-3555
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:N/I:N/A:P |
8.0
|
2.9
|
NIST |
CWE ids for CVE-2014-3555
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2014-3555
-
http://www.securityfocus.com/bid/68765
OpenStack Neutron CVE-2014-3555 Denial of Service Vulnerability
-
http://rhn.redhat.com/errata/RHSA-2014-1120.html
RHSA-2014:1120 - Security Advisory - Red Hat Customer Portal
-
http://seclists.org/oss-sec/2014/q3/200
oss-sec: [OSSA 2014-025] Denial of Service in Neutron allowed address pair (CVE-2014-3555)
-
http://lists.openstack.org/pipermail/openstack-announce/2014-July/000255.html
OpenStack Open Source Cloud Computing Software » Message: [openstack-announce] [OSSA 2014-025] Denial of Service in Neutron allowed address pair (CVE-2014-3555)Vendor Advisory
-
http://rhn.redhat.com/errata/RHSA-2014-1119.html
RHSA-2014:1119 - Security Advisory - Red Hat Customer Portal
-
https://bugs.launchpad.net/neutron/+bug/1336207
Bug #1336207 “[OSSA 2014-025] There is no quota for allowed addr...” : Bugs : neutron
-
http://secunia.com/advisories/60804
Sign in
-
http://secunia.com/advisories/60766
Sign in
Jump to