CVE-2017-7543 OpenStack Neutron Race Condition vulnerability

MediumCVSS 5.9 EPSS 1.8%

Published: 2018-07-26 17:00
Updated: 2026-09-10 06:49
Exploit status: No public exploit known

Description

A race-condition flaw was discovered in openstack-neutron before 7.2.0-12.1, 8.x before 8.3.0-11.1, 9.x before 9.3.1-2.1, and 10.x before 10.0.2-1.1, where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0: net.bridge.bridge-nf-call-ip6tables and net.bridge.bridge-nf-call-iptables. The race was only triggered by an update, at which point an attacker could access exposed tenant VMs and network resources.

Affected products

Product	Affected versions	Fixed in
pypi neutron(PyPI)	< 7.2.0-12.1	7.2.0-12.1
pypi neutron(PyPI)	>= 8.0.0, < 8.3.0-11.1	8.3.0-11.1
pypi neutron(PyPI)	>= 9.0.0, < 9.3.1-2.1	9.3.1-2.1
pypi neutron(PyPI)	>= 10.0.0, < 10.0.2-1.1	10.0.2-1.1
pypi neutron(PyPI)	= 10.0.5	No fix listed
pypi neutron(PyPI)	= 10.0.6	No fix listed
pypi neutron(PyPI)	= 10.0.7	No fix listed
pypi neutron(PyPI)	= 11.0.3	No fix listed
pypi neutron(PyPI)	= 11.0.4	No fix listed
pypi neutron(PyPI)	= 11.0.5	No fix listed
pypi neutron(PyPI)	= 11.0.6	No fix listed
pypi neutron(PyPI)	= 11.0.7	No fix listed
pypi neutron(PyPI)	= 11.0.8	No fix listed
pypi neutron(PyPI)	= 12.0.0	No fix listed
pypi neutron(PyPI)	= 12.0.0.0b3	No fix listed
pypi neutron(PyPI)	= 12.0.0.0rc1	No fix listed
pypi neutron(PyPI)	= 12.0.0.0rc2	No fix listed
pypi neutron(PyPI)	= 12.0.1	No fix listed
pypi neutron(PyPI)	= 12.0.2	No fix listed
pypi neutron(PyPI)	= 12.0.3	No fix listed
pypi neutron(PyPI)	= 12.0.4	No fix listed
pypi neutron(PyPI)	= 12.0.5	No fix listed
pypi neutron(PyPI)	= 12.0.6	No fix listed
pypi neutron(PyPI)	= 12.1.0	No fix listed
pypi neutron(PyPI)	= 12.1.1	No fix listed

Show 162 more

Product	Affected versions	Fixed in
pypi neutron(PyPI)	= 13.0.0	No fix listed
pypi neutron(PyPI)	= 13.0.0.0b1	No fix listed
pypi neutron(PyPI)	= 13.0.0.0b2	No fix listed
pypi neutron(PyPI)	= 13.0.0.0b3	No fix listed
pypi neutron(PyPI)	= 13.0.0.0rc1	No fix listed
pypi neutron(PyPI)	= 13.0.0.0rc2	No fix listed
pypi neutron(PyPI)	= 13.0.1	No fix listed
pypi neutron(PyPI)	= 13.0.2	No fix listed
pypi neutron(PyPI)	= 13.0.3	No fix listed
pypi neutron(PyPI)	= 13.0.4	No fix listed
pypi neutron(PyPI)	= 13.0.5	No fix listed
pypi neutron(PyPI)	= 13.0.6	No fix listed
pypi neutron(PyPI)	= 13.0.7	No fix listed
pypi neutron(PyPI)	= 14.0.0	No fix listed
pypi neutron(PyPI)	= 14.0.0.0b1	No fix listed
pypi neutron(PyPI)	= 14.0.0.0b2	No fix listed
pypi neutron(PyPI)	= 14.0.0.0b3	No fix listed
pypi neutron(PyPI)	= 14.0.0.0rc1	No fix listed
pypi neutron(PyPI)	= 14.0.1	No fix listed
pypi neutron(PyPI)	= 14.0.2	No fix listed
pypi neutron(PyPI)	= 14.0.3	No fix listed
pypi neutron(PyPI)	= 14.0.4	No fix listed
pypi neutron(PyPI)	= 14.1.0	No fix listed
pypi neutron(PyPI)	= 14.2.0	No fix listed
pypi neutron(PyPI)	= 14.3.0	No fix listed
pypi neutron(PyPI)	= 14.3.1	No fix listed
pypi neutron(PyPI)	= 14.4.0	No fix listed
pypi neutron(PyPI)	= 14.4.1	No fix listed
pypi neutron(PyPI)	= 14.4.2	No fix listed
pypi neutron(PyPI)	= 15.0.0	No fix listed
pypi neutron(PyPI)	= 15.0.0.0b1	No fix listed
pypi neutron(PyPI)	= 15.0.0.0rc1	No fix listed
pypi neutron(PyPI)	= 15.0.0.0rc2	No fix listed
pypi neutron(PyPI)	= 15.0.1	No fix listed
pypi neutron(PyPI)	= 15.0.2	No fix listed
pypi neutron(PyPI)	= 15.1.0	No fix listed
pypi neutron(PyPI)	= 15.2.0	No fix listed
pypi neutron(PyPI)	= 15.3.0	No fix listed
pypi neutron(PyPI)	= 15.3.1	No fix listed
pypi neutron(PyPI)	= 15.3.2	No fix listed
pypi neutron(PyPI)	= 15.3.3	No fix listed
pypi neutron(PyPI)	= 15.3.4	No fix listed
pypi neutron(PyPI)	= 16.0.0	No fix listed
pypi neutron(PyPI)	= 16.0.0.0b1	No fix listed
pypi neutron(PyPI)	= 16.0.0.0rc1	No fix listed
pypi neutron(PyPI)	= 16.0.0.0rc2	No fix listed
pypi neutron(PyPI)	= 16.1.0	No fix listed
pypi neutron(PyPI)	= 16.2.0	No fix listed
pypi neutron(PyPI)	= 16.3.0	No fix listed
pypi neutron(PyPI)	= 16.3.1	No fix listed
pypi neutron(PyPI)	= 16.3.2	No fix listed
pypi neutron(PyPI)	= 16.4.0	No fix listed
pypi neutron(PyPI)	= 16.4.1	No fix listed
pypi neutron(PyPI)	= 16.4.2	No fix listed
pypi neutron(PyPI)	= 17.0.0	No fix listed
pypi neutron(PyPI)	= 17.0.0.0rc1	No fix listed
pypi neutron(PyPI)	= 17.0.0.0rc2	No fix listed
pypi neutron(PyPI)	= 17.1.0	No fix listed
pypi neutron(PyPI)	= 17.1.1	No fix listed
pypi neutron(PyPI)	= 17.1.2	No fix listed
pypi neutron(PyPI)	= 17.2.0	No fix listed
pypi neutron(PyPI)	= 17.2.1	No fix listed
pypi neutron(PyPI)	= 17.3.0	No fix listed
pypi neutron(PyPI)	= 17.4.0	No fix listed
pypi neutron(PyPI)	= 17.4.1	No fix listed
pypi neutron(PyPI)	= 18.0.0	No fix listed
pypi neutron(PyPI)	= 18.0.0.0rc1	No fix listed
pypi neutron(PyPI)	= 18.0.0.0rc2	No fix listed
pypi neutron(PyPI)	= 18.1.0	No fix listed
pypi neutron(PyPI)	= 18.1.1	No fix listed
pypi neutron(PyPI)	= 18.2.0	No fix listed
pypi neutron(PyPI)	= 18.3.0	No fix listed
pypi neutron(PyPI)	= 18.4.0	No fix listed
pypi neutron(PyPI)	= 18.5.0	No fix listed
pypi neutron(PyPI)	= 18.6.0	No fix listed
pypi neutron(PyPI)	= 19.0.0	No fix listed
pypi neutron(PyPI)	= 19.0.0.0rc1	No fix listed
pypi neutron(PyPI)	= 19.0.0.0rc2	No fix listed
pypi neutron(PyPI)	= 19.1.0	No fix listed
pypi neutron(PyPI)	= 19.2.0	No fix listed
pypi neutron(PyPI)	= 19.3.0	No fix listed
pypi neutron(PyPI)	= 19.4.0	No fix listed
pypi neutron(PyPI)	= 19.5.0	No fix listed
pypi neutron(PyPI)	= 19.6.0	No fix listed
pypi neutron(PyPI)	= 19.7.0	No fix listed
pypi neutron(PyPI)	= 20.0.0	No fix listed
pypi neutron(PyPI)	= 20.0.0.0rc1	No fix listed
pypi neutron(PyPI)	= 20.0.0.0rc2	No fix listed
pypi neutron(PyPI)	= 20.1.0	No fix listed
pypi neutron(PyPI)	= 20.2.0	No fix listed
pypi neutron(PyPI)	= 20.3.0	No fix listed
pypi neutron(PyPI)	= 20.3.1	No fix listed
pypi neutron(PyPI)	= 20.4.0	No fix listed
pypi neutron(PyPI)	= 20.5.0	No fix listed
pypi neutron(PyPI)	= 21.0.0	No fix listed
pypi neutron(PyPI)	= 21.0.0.0rc1	No fix listed
pypi neutron(PyPI)	= 21.0.0.0rc2	No fix listed
pypi neutron(PyPI)	= 21.1.0	No fix listed
pypi neutron(PyPI)	= 21.1.1	No fix listed
pypi neutron(PyPI)	= 21.1.2	No fix listed
pypi neutron(PyPI)	= 21.2.0	No fix listed
pypi neutron(PyPI)	= 21.2.1	No fix listed
pypi neutron(PyPI)	= 22.0.0	No fix listed
pypi neutron(PyPI)	= 22.0.0.0rc1	No fix listed
pypi neutron(PyPI)	= 22.0.0.0rc2	No fix listed
pypi neutron(PyPI)	= 22.0.1	No fix listed
pypi neutron(PyPI)	= 22.0.2	No fix listed
pypi neutron(PyPI)	= 22.1.0	No fix listed
pypi neutron(PyPI)	= 22.2.0	No fix listed
pypi neutron(PyPI)	= 22.2.1	No fix listed
pypi neutron(PyPI)	= 23.0.0	No fix listed
pypi neutron(PyPI)	= 23.0.0.0b1	No fix listed
pypi neutron(PyPI)	= 23.0.0.0b2	No fix listed
pypi neutron(PyPI)	= 23.0.0.0b3	No fix listed
pypi neutron(PyPI)	= 23.0.0.0rc1	No fix listed
pypi neutron(PyPI)	= 23.0.0.0rc2	No fix listed
pypi neutron(PyPI)	= 23.1.0	No fix listed
pypi neutron(PyPI)	= 23.2.0	No fix listed
pypi neutron(PyPI)	= 23.3.0	No fix listed
pypi neutron(PyPI)	= 23.4.0	No fix listed
pypi neutron(PyPI)	= 23.5.0	No fix listed
pypi neutron(PyPI)	= 24.0.0	No fix listed
pypi neutron(PyPI)	= 24.0.0.0b1	No fix listed
pypi neutron(PyPI)	= 24.0.0.0rc1	No fix listed
pypi neutron(PyPI)	= 24.0.0.0rc2	No fix listed
pypi neutron(PyPI)	= 24.0.1	No fix listed
pypi neutron(PyPI)	= 24.1.0	No fix listed
pypi neutron(PyPI)	= 24.2.0	No fix listed
pypi neutron(PyPI)	= 24.2.1	No fix listed
pypi neutron(PyPI)	= 24.2.2	No fix listed
pypi neutron(PyPI)	= 25.0.0	No fix listed
pypi neutron(PyPI)	= 25.0.0.0b1	No fix listed
pypi neutron(PyPI)	= 25.0.0.0rc1	No fix listed
pypi neutron(PyPI)	= 25.0.0.0rc2	No fix listed
pypi neutron(PyPI)	= 25.1.0	No fix listed
pypi neutron(PyPI)	= 25.2.0	No fix listed
pypi neutron(PyPI)	= 25.2.1	No fix listed
pypi neutron(PyPI)	= 25.2.2	No fix listed
pypi neutron(PyPI)	= 25.2.3	No fix listed
pypi neutron(PyPI)	= 26.0.0	No fix listed
pypi neutron(PyPI)	= 26.0.0.0b1	No fix listed
pypi neutron(PyPI)	= 26.0.0.0b2	No fix listed
pypi neutron(PyPI)	= 26.0.0.0rc1	No fix listed
pypi neutron(PyPI)	= 26.0.0.0rc2	No fix listed
pypi neutron(PyPI)	= 26.0.1	No fix listed
pypi neutron(PyPI)	= 26.0.2	No fix listed
pypi neutron(PyPI)	= 26.0.3	No fix listed
pypi neutron(PyPI)	= 26.0.4	No fix listed
pypi neutron(PyPI)	= 26.0.5	No fix listed
pypi neutron(PyPI)	= 27.0.0	No fix listed
pypi neutron(PyPI)	= 27.0.0.0b1	No fix listed
pypi neutron(PyPI)	= 27.0.0.0rc1	No fix listed
pypi neutron(PyPI)	= 27.0.1	No fix listed
pypi neutron(PyPI)	= 27.0.2	No fix listed
pypi neutron(PyPI)	= 27.0.3	No fix listed
pypi neutron(PyPI)	= 28.0.0	No fix listed
pypi neutron(PyPI)	= 28.0.0.0b1	No fix listed
pypi neutron(PyPI)	= 28.0.0.0b2	No fix listed
pypi neutron(PyPI)	= 28.0.0.0rc1	No fix listed
pypi neutron(PyPI)	= 28.0.0.0rc2	No fix listed
pypi neutron(PyPI)	= 28.0.1	No fix listed
pypi neutron(PyPI)	= 29.0.0.0b1	No fix listed

References

nvd.nist.gov third-party-advisory vendor-advisory
RHSA-2017:2447 third-party-advisory vendor-advisory
RHSA-2017:2448 third-party-advisory vendor-advisory
RHSA-2017:2449 third-party-advisory vendor-advisory
RHSA-2017:2450 third-party-advisory vendor-advisory
RHSA-2017:2451 third-party-advisory vendor-advisory
RHSA-2017:2452 third-party-advisory vendor-advisory
bugzilla.redhat.com issue-tracking mitigation third-party-advisory
access.redhat.com
bugzilla.redhat.com
web.archive.org
github.com vendor-advisory
opendev.org product
pypi.org product
100237 third-party-advisory vdb-entry
Debian Security Tracker CVE-2017-7543 vendor-advisory

CVSS v3.0

5.9 Medium

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector: Network
Attack Complexity: High
Privileges Required: None
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: None
Availability: None

All scores (7)

v3.0 5.9 · nvd@nist.gov
v3.0 5.3 · redhat
v3.0 5.9 · osv:ghsa
v3.0 5.9 · osv:pysec
v3.0 5.3 · secalert@redhat.com
v3.0 5.9 · github
v2.0 4.3 · nvd@nist.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.84% (percentile 79.3)
CWE: CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.