CVE-2014-7821
Published: 24 November 2014
OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (crash) via a crafted dns_nameservers value in the DNS configuration.
Notes
| Author | Note |
|---|---|
| mdeslaur | perhaps the following commit should also be used: https://git.openstack.org/cgit/openstack/neutron/commit/?h=stable/icehouse&id=d39349cf47dfe9ac3f52089402d69cd1be8b013b |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
neutron Launchpad, Ubuntu, Debian |
lucid |
Does not exist
|
| precise |
Does not exist
|
|
| trusty |
Released
(1:2014.1.4-0ubuntu1)
|
|
| upstream |
Needs triage
|
|
| utopic |
Not vulnerable
(1:2014.2.1-0ubuntu1)
|
|
| vivid |
Not vulnerable
(1:2015.1~b1-0ubuntu5)
|
|
|
Patches: upstream: https://git.openstack.org/cgit/openstack/neutron/commit/?id=ab7ea069de5cecf1c26af50996a26e1a7f86def4 upstream: https://git.openstack.org/cgit/openstack/neutron/commit/?id=d39349cf47dfe9ac3f52089402d69cd1be8b013b |
||