The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an IPv6 private subnet to a L3 router.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows     remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an     IPv6 private subnet to a L3 router. (CVE-2014-4167)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2255-1 advisory.

    Darragh O'Reilly discovered that the Ubuntu packaging for OpenStack Neutron did not properly set up its     sudo configuration. If a different flaw was found in OpenStack Neutron, this vulnerability could be used     to escalate privileges. (CVE-2013-6433)

    Stephen Ma and Christoph Thiel discovered that the openvswitch-agent in OpenStack Neutron did not properly     perform input validation when creating security group rules when specifying --remote-ip-prefix. A remote     authenticated attacker could exploit this to prevent application of additional rules. (CVE-2014-0187)

    Thiago Martins discovered that OpenStack Neutron would inappropriately apply SNAT rules to IPv6 subnets     when using the L3-agent. A remote authenticated attacker could exploit this to prevent floating IPv4     addresses from being attached throughout the cloud. (CVE-2014-4167)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Fixed a security issue that allowed an authorised user to break Neutron L3-agent using a IPv6 subnet. This is an update that fixes problems communicating with the latest upstream stable Qpid >= 0.28.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
218234	Linux Distros Unpatched Vulnerability : CVE-2014-4167	Nessus	Misc.	high
76250	Ubuntu 14.04 LTS : OpenStack Neutron vulnerabilities (USN-2255-1)	Nessus	Ubuntu Local Security Checks	high
76222	Fedora 20 : openstack-neutron-2013.2.3-9.fc20 (2014-7446)	Nessus	Fedora Local Security Checks	low

Detections

Analytics

CVE-2014-4167

high

Tenable Plugins

high

high

low