CVE-2014-7821

OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (crash) via a crafted dns_nameservers value in the DNS configuration.

• CWE-20
• CWE-399

• http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155351.htmlThird Party Advisory
• http://lists.openstack.org/pipermail/openstack-announce/2014-November/000303.htmlPatch, Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2014-1938.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-1942.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0044.htmlThird Party Advisory
• http://secunia.com/advisories/62586Third Party Advisory
• http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.htmlThird Party Advisory
• https://bugs.launchpad.net/neutron/+bug/1378450Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98818Third Party Advisory, VDB Entry
• http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155351.htmlThird Party Advisory
• http://lists.openstack.org/pipermail/openstack-announce/2014-November/000303.htmlPatch, Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2014-1938.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-1942.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0044.htmlThird Party Advisory
• http://secunia.com/advisories/62586Third Party Advisory
• http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.htmlThird Party Advisory
• https://bugs.launchpad.net/neutron/+bug/1378450Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98818Third Party Advisory, VDB Entry

Published

Nov 24, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-7815The set_pixel_format function in ui/vnc.c in QEMU allows rem…
• CVE-2014-7816Directory traversal vulnerability in JBoss Undertow 1.0.x be…
• CVE-2014-7817The wordexp function in GNU C Library (aka glibc) 2.21 does …
• CVE-2014-7818Directory traversal vulnerability in actionpack/lib/action_d…
• CVE-2014-7819Multiple directory traversal vulnerabilities in server.rb in…
• CVE-2014-7820Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-7822The implementation of certain splice_write file operations i…
• CVE-2014-7823The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows …
• CVE-2014-7824D-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10…
• CVE-2014-7825kernel/trace/trace_syscalls.c in the Linux kernel through 3.…7.8
• CVE-2014-7826kernel/trace/trace_syscalls.c in the Linux kernel through 3.…7.8
• CVE-2014-7827The org.jboss.security.plugins.mapping.JBossMappingManager i…