Skip to content
OpenAdvisories
Unscored RHSA-2014:0091 1 CVE

Red Hat Security Advisory: openstack-neutron security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron 0:2013.2.1-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-bigswitch 0:2013.2.1-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-brocade 0:2013.2.1-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-cisco 0:2013.2.1-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-hyperv 0:2013.2.1-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-linuxbridge 0:2013.2.1-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-mellanox 0:2013.2.1-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-metaplugin 0:2013.2.1-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-metering-agent 0:2013.2.1-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-midonet 0:2013.2.1-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-ml2 0:2013.2.1-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-nec 0:2013.2.1-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-nicira 0:2013.2.1-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-openvswitch 0:2013.2.1-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-plumgrid 0:2013.2.1-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-ryu 0:2013.2.1-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-vpn-agent 0:2013.2.1-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 python-neutron 0:2013.2.1-4.el6ost

Vulnerabilities 1

  • Medium —
    CVE-2013-6419

    OpenStack Nova Router metadata queries are not restricted by tenant

    Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port,…

    nova nova neutron Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1038737
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1039148
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1039528
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1040196
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1045067
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1046070
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1046087
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1054249
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0091.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-6419
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-6419
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-6419