CVE-2013-6433: Canonical Ubuntu Linux

High severity, CVSS 7.6. EPSS: 3.3% chance of exploitation in the next 30 days.

The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootwrap, which allows remote attackers to gain privileges via a crafted configuration file.

Affected products

• Canonical Ubuntu Linux: version 13.10 only; version 14.04 only
• Openstack Neutron: from 2013.1, up to and including 2013.2.3

Published 2014-06-02. Last modified 2026-06-17.