Lucene search

K
osvGoogleOSV:CVE-2021-38598
HistoryAug 23, 2021 - 5:15 a.m.

CVE-2021-38598

2021-08-2305:15:08
Google
osv.dev
13
openstack neutron
hardware address impersonation
denial of service
traffic interception
netfilter-based platform
linuxbridge driver

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

40.6%

OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address impersonation when the linuxbridge driver with ebtables-nft is used on a Netfilter-based platform. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the hardware addresses of other systems on the network, resulting in denial of service or in some cases possibly interception of traffic intended for other destinations.

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

40.6%