CVEvulnerability
CVE-2014-0592
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-04-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Barclamp (aka barclamp-network) 1.7 for the Crowbar Framework, as used in SUSE Cloud 3, does not enable netfilter on bridges when creating new instances, which allows remote attackers to bypass security group restrictions via unspecified vectors, related to floating IPs.
Affected configurations
• crowbar barclamp 1.7
• novell suse cloud 3.0
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00025.html Patch, Vendor Advisory
- http://secunia.com/advisories/57509 Vendor Advisory
- http://www.securityfocus.com/bid/66519 www.securityfocus.com
- https://bugzilla.novell.com/show_bug.cgi?id=864183 bugzilla.novell.com
- https://github.com/crowbar/barclamp-network/pull/269 github.com
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00025.html Patch, Vendor Advisory
- http://secunia.com/advisories/57509 Vendor Advisory
- http://www.securityfocus.com/bid/66519 www.securityfocus.com
- https://bugzilla.novell.com/show_bug.cgi?id=864183 bugzilla.novell.com
- https://github.com/crowbar/barclamp-network/pull/269 github.com