Iniciar sesión
Deutsch English Español Polski
Baja

OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks

  • Publicada: 04.06.2026
  • Actualizado: 11.10.2026 15:17

In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set device_owner to a value that has "network:" at the beginning ("network:dhcp" for example). The default port RBAC policies incorrectly included PROJECT_MANAGER without requiring network ownership, allowing any project manager to obtain trusted network-service port behavior on shared networks. Depending on backend and deployment, this can bypass anti-spoofing and security group protections, enabling DHCP, MAC, or IP spoofing against other tenants on the shared network. This is a regression of CVE-2015-5240 (OSSA-2015-018).

Software afectado

Haz clic en una tecnología para ver todas sus vulnerabilidades.

PlataformaPaqueteVersiones vulnerablesCorregida en
Python (PyPI) neutron < 28.0.1 28.0.1

Referencias

Puntuación CVSS 2.2/10
Vector CVSS
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N
Debilidad (CWE)
CWE-863
Plataforma
Python (PyPI)
Paquete
neutron
Publicada
04.06.2026
Actualizado
11.10.2026 15:17

Fuentes y licencias

OSV / GitHub Advisory Database - PYSEC-2026-3491 - PyPA Advisory Database; CC BY 4.0

OSV / GitHub Advisory Database - GHSA-qmc5-gv6v-8p22 - CC BY 4.0

Historial de vulnerabilidades: neutron

Todas las vulnerabilidades publicadas de este paquete (Python (PyPI)), de la más reciente a la más antigua. Muestra si es un fallo aislado o un paquete que hay que vigilar.

Todas (21) en el archivo
Entradas en total
21
Primera → última
09.2018 06.2026
Sin corrección
1
Explotada en ataques
0

Distribución por gravedad

  • Crítica 1
  • Alta 9
  • Media 9
  • Baja 2

Divulgaciones por año

Gravedad:
  1. OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks esta entrada
    Baja · 2.2 CVE-2026-50266 < 28.0.1 28.0.1
  2. OpenStack Neutron Intended MAC-spoofing protection mechanism bypass
    Alta · 8.2 CVE-2016-5363 < 7.1.0, >= 8.0.0, < 8.1.0 7.1.0, 8.1.0
  3. OpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism
    Alta · 8.2 CVE-2016-5362 < 7.0.5, >= 8.0.0, < 8.1.1 7.0.5, 8.1.1
  4. OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism
    Crítica · 9.1 CVE-2015-8914 < 7.0.5, >= 8.0.0, < 8.1.1 7.0.5, 8.1.1
  5. An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. By making API requests involving nonexistent controllers, an authentica
    Alta · 6.5 CVE-2021-40797 < 16.4.1, >= 17.0.0, < 17.2.1, >= 18.0.0, < 18.1.1 16.4.1, 17.2.1, 18.1.1
  6. An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.
    Alta · 6.5 CVE-2021-40085 < 16.4.1, >= 17.0.0, < 17.2.1, >= 18.0.0, < 18.1.1 16.4.1, 17.2.1, 18.1.1
  7. OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address impersonation when the linuxbridge driver with ebtables-nft is used on a Netfilter-based platform. By sending ca
    Alta · 9.1 CVE-2021-38598 < 16.4.1, >= 17.0.0, < 17.1.3, >= 18.0.0, < 18.1.0 16.4.1, 17.1.3, 18.1.0
  8. A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonat
    Alta · 7.1 CVE-2021-20267 < 15.3.3, >= 16.0.0, < 16.3.1, >= 17.0.0, < 17.1.1 15.3.3, 16.3.1, 17.1.1
  9. An issue was discovered in OpenStack Neutron 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By creating two security groups with separate/overlapping port ranges, an authenticated use
    Alta · 6.5 CVE-2019-10876 >= 12.0.0, < 12.0.6, < 11.0.7, >= 13.0.0, < 13.0.3 12.0.6, 11.0.7, 13.0.3
  10. An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.8, 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By setting a destination port in a security
    Alta · 6.5 CVE-2019-9735 >= 12.0.0, < 12.0.6, >= 13.0.0, < 13.0.3, >= 11.0.0, < 11.0.7, < 10.0.8 12.0.6, 13.0.3, 11.0.7, 10.0.8
  11. When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service coul
    Alta · 6.5 CVE-2018-14635 < 11.0.6, >= 12.0.0, < 12.0.4 11.0.6, 12.0.4

Identifica las vulnerabilidades de tu aplicación

Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.

Conectar tu aplicación
Newsletter DockRay

La seguridad de tus aplicaciones en tu correo

Vulnerabilidades importantes, recomendaciones concretas y consejos prácticos para tus aplicaciones. Elige tus tecnologías y sigue lo que importa para tu proyecto.

  • Un resumen diario de nuevas vulnerabilidades, también las críticas.
  • Avisos sobre actualizaciones importantes.
  • Consejos prácticos sobre seguridad y monitorización de aplicaciones.

Déjalo vacío para recibir avisos de todas las tecnologías.

Política de privacidad

Suscripción gratuita. Date de baja con un clic en cualquier correo.