Alta

OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address impersonation when the linuxbridge driver with ebtables-nft is used on a Netfilter-based platform. By sending ca

Publicada: 23.08.2021
Actualizado: 11.10.2026 12:20

OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address impersonation when the linuxbridge driver with ebtables-nft is used on a Netfilter-based platform. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the hardware addresses of other systems on the network, resulting in denial of service or in some cases possibly interception of traffic intended for other destinations.

Software afectado

Haz clic en una tecnología para ver todas sus vulnerabilidades.

Plataforma	Paquete	Versiones vulnerables	Corregida en
Python (PyPI)	neutron	< 16.4.1, >= 17.0.0, < 17.1.3, >= 18.0.0, < 18.1.0	16.4.1, 17.1.3, 18.1.0

Referencias

Puntuación CVSS 9.1/10

Vector CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Debilidad (CWE): CWE-863
Plataforma: Python (PyPI)
Paquete: neutron
Publicada: 23.08.2021
Actualizado: 11.10.2026 12:20

Fuentes y licencias

OSV / GitHub Advisory Database - GHSA-hvm4-mc7m-22w4 - CC BY 4.0

OSV / GitHub Advisory Database - PYSEC-2021-360 - PyPA Advisory Database; CC BY 4.0

Historial de vulnerabilidades: neutron

Todas las vulnerabilidades publicadas de este paquete (Python (PyPI)), de la más reciente a la más antigua. Muestra si es un fallo aislado o un paquete que hay que vigilar.

Todas (21) en el archivo

Entradas en total: 21
Primera → última: 09.2018 06.2026
Sin corrección: 1
Explotada en ataques: 0

Distribución por gravedad

Crítica 1
Alta 9
Media 9
Baja 2

Divulgaciones por año

2018: 2
2019: 2
2020: 0
2021: 4
2022: 8
2023: 2
2024: 1
2025: 0
2026: 2

17.05.2022

OpenStack Neutron Intended MAC-spoofing protection mechanism bypass

Alta · 8.2 CVE-2016-5363 < 7.1.0, >= 8.0.0, < 8.1.0 7.1.0, 8.1.0
14.05.2022

OpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism

Alta · 8.2 CVE-2016-5362 < 7.0.5, >= 8.0.0, < 8.1.1 7.0.5, 8.1.1
14.05.2022

OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism

Crítica · 9.1 CVE-2015-8914 < 7.0.5, >= 8.0.0, < 8.1.1 7.0.5, 8.1.1
08.09.2021

An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. By making API requests involving nonexistent controllers, an authentica

Alta · 6.5 CVE-2021-40797 < 16.4.1, >= 17.0.0, < 17.2.1, >= 18.0.0, < 18.1.1 16.4.1, 17.2.1, 18.1.1
31.08.2021

An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.

Alta · 6.5 CVE-2021-40085 < 16.4.1, >= 17.0.0, < 17.2.1, >= 18.0.0, < 18.1.1 16.4.1, 17.2.1, 18.1.1
23.08.2021

OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address impersonation when the linuxbridge driver with ebtables-nft is used on a Netfilter-based platform. By sending ca esta entrada

Alta · 9.1 CVE-2021-38598 < 16.4.1, >= 17.0.0, < 17.1.3, >= 18.0.0, < 18.1.0 16.4.1, 17.1.3, 18.1.0
28.05.2021

A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonat

Alta · 7.1 CVE-2021-20267 < 15.3.3, >= 16.0.0, < 16.3.1, >= 17.0.0, < 17.1.1 15.3.3, 16.3.1, 17.1.1
05.04.2019

An issue was discovered in OpenStack Neutron 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By creating two security groups with separate/overlapping port ranges, an authenticated use

Alta · 6.5 CVE-2019-10876 >= 12.0.0, < 12.0.6, < 11.0.7, >= 13.0.0, < 13.0.3 12.0.6, 11.0.7, 13.0.3
13.03.2019

An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.8, 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By setting a destination port in a security

Alta · 6.5 CVE-2019-9735 >= 12.0.0, < 12.0.6, >= 13.0.0, < 13.0.3, >= 11.0.0, < 11.0.7, < 10.0.8 12.0.6, 13.0.3, 11.0.7, 10.0.8
10.09.2018

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service coul

Alta · 6.5 CVE-2018-14635 < 11.0.6, >= 12.0.0, < 12.0.4 11.0.6, 12.0.4

Identifica las vulnerabilidades de tu aplicación

Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.

Conectar tu aplicación