Vulnerability Description
OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (crash) via a crafted dns_nameservers value in the DNS configuration.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Openstack | Neutron | >= 2012.2.1, < 2014.1.4 |
| Fedoraproject | Fedora | 20 |
| Redhat | Openstack | 4.0 |
Related Weaknesses (CWE)
References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155351.htmlThird Party Advisory
- http://lists.openstack.org/pipermail/openstack-announce/2014-November/000303.htmPatchVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1938.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1942.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0044.htmlThird Party Advisory
- http://secunia.com/advisories/62586Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.htmlThird Party Advisory
- https://bugs.launchpad.net/neutron/+bug/1378450Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98818Third Party AdvisoryVDB Entry
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155351.htmlThird Party Advisory
- http://lists.openstack.org/pipermail/openstack-announce/2014-November/000303.htmPatchVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1938.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1942.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0044.htmlThird Party Advisory
- http://secunia.com/advisories/62586Third Party Advisory
FAQ
What is CVE-2014-7821?
CVE-2014-7821 is a vulnerability with a CVSS score of 4.0 (MEDIUM). OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (crash) via a crafted dns_nameservers value in the DNS configuration.
How severe is CVE-2014-7821?
CVE-2014-7821 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-7821?
Check the references section above for vendor advisories and patch information. Affected products include: Openstack Neutron, Fedoraproject Fedora, Redhat Openstack.