Neutron Security Vulnerabilities and Issues — Neutron CVE List

Lucene search

OpenstackNeutron

3 matches found

cve•added 2021/08/23 5:15 a.m.•84 views

CVE-2021-38598

OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address impersonation when the linuxbridge driver with ebtables-nft is used on a Netfilter-based platform. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can...

9.1CVSS8.9AI score0.00032EPSS

cve•added 2016/06/17 3:59 p.m.•59 views

CVE-2015-8914

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address.

9.1CVSS8.9AI score0.01533EPSS

cve•added 2014/04/28 2:9 p.m.•57 views

CVE-2014-0187

The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied.

9CVSS6.1AI score0.00523EPSS