Description
The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allows remote attackers to gain privileges via a crafted configuration file. NOTE: this vulnerability exists because of a CVE-2013-6433 regression.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenStack 5 | python-neutron +20 | 2014.1.2-4.el6ost | RHSA-2014:1339 |
Advisories 1
- RHSA-2014:1339 Red Hat Security Advisory: openstack-neutron security and bug fix update Red Hat Security Advisories (RHSA) · Aug 1, 2026
References
- RHSA-2014:1339 vendor-advisory