CVE-2021-38598

CVE-2021-38598 affects OpenStack Neutron: OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allow hardware address impersonation when the linuxbridge driver with ebtables-nft is used on a Netfilter-based platform. An attacker controlling a server instance connected to the virtual sw...

CVE-2015-8914

The CVE-2015-8914 entry corresponds to an ICMPv6-spoofing bypass in OpenStack Neutron’s IPTables firewall. The vulnerable component is Neutron’s firewall rules (IPTables) on OpenStack Neutron before versions 7.0.4 and 8.0.0 through 8.1.0. Root cause: the ICMPv6-spoofing protection mechanism can b...

CVE-2014-0187

CVE-2014-0187 affects OpenStack Neutron where openvswitch-agent could bypass security group rules by using an invalid CIDR in a security group rule, preventing subsequent rules from applying. The issue affected OpenStack Neutron releases prior to 2013.2.4 (and 2014.1 prior to 2014.1.1); multiple ...