Question 1

What is CVE-2013-6433?

Accepted Answer

CVE-2013-6433 is a high-severity software vulnerability (CWE-264) with a CVSS score of 7.6. The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootwrap, which allows remote attackers to gain privileges via a crafted configuration file.

Question 2

Is CVE-2013-6433 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 3%.

Question 3

What products does CVE-2013-6433 affect?

Accepted Answer

Tracked products affected include Ubuntu. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2013-6433?

Accepted Answer

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

CVE-2013-6433

Summary

Impact & exploitability

Affected products we track (1)

Recommendation

Additional information