CVE-2014-4167: Canonical Ubuntu Linux

Low severity, CVSS 3.5. EPSS: 1.7% chance of exploitation in the next 30 days.

The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an IPv6 private subnet to a L3 router.

Affected products

• Canonical Ubuntu Linux: version 13.10 only; version 14.04 only
• Openstack Neutron: from 2011.1, up to and including 2013.2.3; version 2014.1 only; version 2014.1.1 only

Published 2014-07-11. Last modified 2026-06-17.