CVE-2014-3555: Openstack Neutron

Medium severity, CVSS 4.0. EPSS: 2.2% chance of exploitation in the next 30 days.

OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (crash or long firewall rule updates) by creating a large number of allowed address pairs.

Affected products

• Openstack Neutron: version 2013.2.4 only; version 2014.1 only; version 2014.1.1 only; version juno-1 only

Published 2014-07-23. Last modified 2026-06-17.