Intel

CVE-2013-6433

The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootw… (CVE-2013-6433)

noneEPSS 3.3%

Description

The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootwrap, which allows remote attackers to gain privileges via a crafted configuration file.

Source: CVELISTV5NVD

Metrics

Severity
none
Priority score
52.68
KEV status
—
Exploit maturity
no public PoC known
XIEM Effective CVSS
—
CVSS v3
—
CVSS v4
—
EPSS percentile
87.9 %
Critical — this CVE ranks in the top fifth of all CVEs scored today (rank ≥ 80%).
EPSS score
3.3 %
Moderate — model estimates 1-10% exploitation likelihood.
Published
2014-06-02 15:00 UTC
CWE
—

Affected operating systems

  • linux

    canonical / ubuntu_linux13.10

  • linux

    canonical / ubuntu_linux14.04

Affected products

Products and version ranges extracted from the vendor/CERT advisory. A range like „<4.14.6“ implies the update recommendation „upgrade to 4.14.6 or later“.

  • openstack

    neutron2013.1 – 2013.2.3

References & sources

IDCVE-2013-6433