CVE-2016-5363 OpenStack Neutron Intended MAC-spoofing protection mechanism bypass
HighCVSS 8.2
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended MAC-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via (1) a crafted DHCP discovery message or (2) crafted non-IP traffic.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi neutron(PyPI) | < 7.1.0 | 7.1.0 |
| pypi neutron(PyPI) | = 0.0 | No fix listed |
| pypi neutron(PyPI) | >= 8.0.0, < 8.1.0 | 8.1.0 |
| pypi neutron(PyPI) | <= 7.0.4 | No fix listed |
| debian/neutron(Debian:12) | < 2:8.1.2-1 | 2:8.1.2-1 |
| debian/neutron(Debian:13) | < 2:8.1.2-1 | 2:8.1.2-1 |
| debian/neutron(Debian:14) | < 2:8.1.2-1 | 2:8.1.2-1 |
| OpenStack Neutron | = 7.0.0 | No fix listed |
| OpenStack Neutron | = 7.0.1 | No fix listed |
| OpenStack Neutron | = 7.0.2 | No fix listed |
| OpenStack Neutron | = 7.0.3 | No fix listed |
| OpenStack Neutron | = 7.0.4 | No fix listed |
| OpenStack Neutron | = 8.0.0 | No fix listed |
| OpenStack Neutron | = 8.1.0 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com patch
- github.com patch
- github.com patch
- RHSA-2016:1473 vendor-advisory
- RHSA-2016:1474 vendor-advisory
- bugs.launchpad.net
- github.com product
- review.openstack.org
- security.openstack.org vendor-advisory
- [oss-security] 20160610 CVE request for vulnerability in OpenStack Neutron mailing-list
- [oss-security] 20160610 Re: CVE request for vulnerability in OpenStack Neutron mailing-list
- pypi.org product
- github.com vendor-advisory
- Debian Security Tracker CVE-2016-5363 vendor-advisory