CVE:CVE-2014-0187
CNNVD:CNNVD-201404-539
OpenStack是美国国家航空航天局（National Aeronautics and Space Administration）和美国Rackspace公司合作研发的一个云平台管理项目。Neutron是其中的一个提供了网络即服务（NaaS）的网络组件，它能够在OpenStack服务之间创建网络、向网格中接入网络设备等。
OpenStack Neutron 2013.2.4之前的2013.1版本和2014.1.1之前的2014.1版本中的openvswitch-agent进程存在安全漏洞。远程攻击者可借助安全组规则中无效的CIDR利用该漏洞绕过安全组限制。
solution:Upgrade openstack neutron to a higher version than 2013.1,2013.1.1,2013.1.2,2013.1.3,2013.1.4,2013.1.5,2013.2,2013.2.1,2013.2.2,2013.2.3,2014.1,and avoid the version 2013.1,2013.1.1,2013.1.2,2013.1.3,2013.1.4,2013.1.5,2013.2,2013.2.1,2013.2.2,2013.2.3,2014.1; Upgrade canonical ubuntu_linux to a higher version than 13.04,14.04,and avoid the version 13.04,14.04; Upgrade opensuse opensuse to a higher version than 13.1,and avoid the version 13.1