CVE-2014-4167: The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows re...

Security readout for executives and security teams

This flaw can let an authenticated OpenStack user disrupt IPv4 address attachment in Neutron by using an IPv6 private subnet with an L3 router. It is a denial-of-service issue, not described as data theft or code execution. Business urgency depends on whether affected Neutron releases still exist in production. Exposure is most likely in older OpenStack private or service-provider clouds running affected Neutron L3-agent versions with authenticated tenant access to router and subnet operations. Unauthenticated internet exposure is not supported by the provided sources. Handle as a targeted availability risk for legacy OpenStack environments. It is not marked actively exploited, but shared cloud platforms with affected Neutron versions should remediate because one authenticated tenant could disrupt network address attachment for others. Mitigation focus: Upgrade Neutron to 2013.2.4, 2014.1.2, Juno-2, or later vendor-supported fixes.; Review Ubuntu and OpenStack advisory guidance for exact package names and supported update paths.; Limit tenant router and subnet administration privileges where operationally feasible..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.