Vulnerabilities > Openstack > Neutron > 2014.2

DATE CVE VULNERABILITY TITLE RISK
2015-01-15 CVE-2014-8153 Improper Input Validation vulnerability in multiple products
The L3 agent in OpenStack Neutron 2014.2.x before 2014.2.2, when using radvd 2.0+, allows remote authenticated users to cause a denial of service (blocked router update processing) by creating eight routers and assigning an ipv6 non-provider subnet to each.
network
low complexity
litech openstack CWE-20
4.0
2014-10-02 CVE-2014-6414 Permissions, Privileges, and Access Controls vulnerability in multiple products
OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to set admin network attributes to default values via unspecified vectors.
network
low complexity
openstack canonical CWE-264
4.0