Skip to content
OpenAdvisories
Unscored RHSA-2014:0516 2 CVEs

Red Hat Security Advisory: openstack-neutron security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-bigswitch 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-brocade 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-cisco 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-hyperv 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-linuxbridge 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-mellanox 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-metaplugin 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-metering-agent 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-midonet 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-ml2 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-nec 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-nicira 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-openvswitch 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-plumgrid 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-ryu 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-neutron-vpn-agent 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 python-neutron 0:2013.2.3-7.el6ost

Vulnerabilities 2

  • Unscored —
    CVE-2013-6433

    The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configurat…

    neutron neutron Debian Ubuntu
  • Medium —
    CVE-2014-0056

    OpenStack Neutron Improper Authentication vulnerability

    The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports into the routers of arbitrary tenants via the device id in a port-create command.

    neutron neutron Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform/4/html/Technical_Notes/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1036523
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1039812
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1050962
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1051028
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1051036
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1051444
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1060709
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1060711
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1063141
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1071891
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1075833
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1076994
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1077487
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1080071
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1081159
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1084535
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1086077
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1098578
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0516.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-6433
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-6433
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-6433
  • report
    https://access.redhat.com/security/cve/CVE-2014-0056
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0056
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0056