All errata/sisyphus/ALT-PU-2016-3304-1
ALT-PU-2016-3304-1

Package update openstack-neutron in branch sisyphus

Version9.0.0-alt1
Task#170964
Published2016-10-26
Max severityCRITICAL
Severity:

Closed issues (6)

CVE-2015-8914
CRITICAL9.1

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address.

Published: 2016-06-17Modified: 2025-04-12
CVSS 2.0MEDIUM 6.4
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:P
CVSS 3.xCRITICAL 9.1
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
References
CVE-2016-5362
HIGH8.2

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended DHCP-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a crafted DHCP discovery message.

Published: 2016-06-17Modified: 2025-04-12
CVSS 2.0MEDIUM 6.4
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:P
CVSS 3.xHIGH 8.2
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
References
CVE-2016-5363
HIGH8.2

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended MAC-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via (1) a crafted DHCP discovery message or (2) crafted non-IP traffic.

Published: 2016-06-17Modified: 2025-04-12
CVSS 2.0MEDIUM 6.4
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:P
CVSS 3.xHIGH 8.2
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
References
GHSA-3vj4-cvjp-482h
CRITICAL9.1

OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism

Published: 2022-05-14Modified: 2025-04-15
CVSS 3.xCRITICAL 9.1
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
References
GHSA-9pp3-cvmq-9p22
HIGH8.2

OpenStack Neutron Intended MAC-spoofing protection mechanism bypass

Published: 2022-05-17Modified: 2024-05-15
CVSS 3.xHIGH 8.2
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
References
GHSA-qpwc-p365-pqrr
HIGH8.2

OpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism

Published: 2022-05-14Modified: 2025-04-15
CVSS 3.xHIGH 8.2
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
References