CVE-2014-0592 | BDVDB-2026-60743 Detail

Description#

Barclamp (aka barclamp-network) 1.7 for the Crowbar Framework, as used in SUSE Cloud 3, does not enable netfilter on bridges when creating new instances, which allows remote attackers to bypass security group restrictions via unspecified vectors, related to floating IPs.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/66519
https://github.com/crowbar/barclamp-network/pull/269
http://secunia.com/advisories/57509
https://bugzilla.novell.com/show_bug.cgi?id=864183
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00025.html

Exploit#

No public exploit known

History#

Version 12014-04-04Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.