Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
NONE Availability impact
HIGH Published: 2016-06-17
Updated: 2018-10-19
Summary
The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended DHCP-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a crafted DHCP discovery message.
Vulnerable Configurations
Part | Description | Count |
Application | Openstack | 6 |
Common Weakness Enumeration (CWE)
Redhat
advisories | |
rpms | - openstack-neutron-1:7.0.4-11.el7ost
- openstack-neutron-bigswitch-1:7.0.4-11.el7ost
- openstack-neutron-brocade-1:7.0.4-11.el7ost
- openstack-neutron-cisco-1:7.0.4-11.el7ost
- openstack-neutron-common-1:7.0.4-11.el7ost
- openstack-neutron-dev-server-1:7.0.4-11.el7ost
- openstack-neutron-embrane-1:7.0.4-11.el7ost
- openstack-neutron-linuxbridge-1:7.0.4-11.el7ost
- openstack-neutron-mellanox-1:7.0.4-11.el7ost
- openstack-neutron-metering-agent-1:7.0.4-11.el7ost
- openstack-neutron-midonet-1:7.0.4-11.el7ost
- openstack-neutron-ml2-1:7.0.4-11.el7ost
- openstack-neutron-nuage-1:7.0.4-11.el7ost
- openstack-neutron-ofagent-1:7.0.4-11.el7ost
- openstack-neutron-oneconvergence-nvsd-1:7.0.4-11.el7ost
- openstack-neutron-opencontrail-1:7.0.4-11.el7ost
- openstack-neutron-openvswitch-1:7.0.4-11.el7ost
- openstack-neutron-ovsvapp-1:7.0.4-11.el7ost
- openstack-neutron-rpc-server-1:7.0.4-11.el7ost
- openstack-neutron-sriov-nic-agent-1:7.0.4-11.el7ost
- python-neutron-1:7.0.4-11.el7ost
- python-neutron-tests-1:7.0.4-11.el7ost
- openstack-neutron-0:2015.1.4-2.el7ost
- openstack-neutron-bigswitch-0:2015.1.4-2.el7ost
- openstack-neutron-brocade-0:2015.1.4-2.el7ost
- openstack-neutron-cisco-0:2015.1.4-2.el7ost
- openstack-neutron-common-0:2015.1.4-2.el7ost
- openstack-neutron-embrane-0:2015.1.4-2.el7ost
- openstack-neutron-ibm-0:2015.1.4-2.el7ost
- openstack-neutron-linuxbridge-0:2015.1.4-2.el7ost
- openstack-neutron-mellanox-0:2015.1.4-2.el7ost
- openstack-neutron-metaplugin-0:2015.1.4-2.el7ost
- openstack-neutron-metering-agent-0:2015.1.4-2.el7ost
- openstack-neutron-midonet-0:2015.1.4-2.el7ost
- openstack-neutron-ml2-0:2015.1.4-2.el7ost
- openstack-neutron-nec-0:2015.1.4-2.el7ost
- openstack-neutron-nuage-0:2015.1.4-2.el7ost
- openstack-neutron-ofagent-0:2015.1.4-2.el7ost
- openstack-neutron-oneconvergence-nvsd-0:2015.1.4-2.el7ost
- openstack-neutron-opencontrail-0:2015.1.4-2.el7ost
- openstack-neutron-openvswitch-0:2015.1.4-2.el7ost
- openstack-neutron-ovsvapp-0:2015.1.4-2.el7ost
- openstack-neutron-plumgrid-0:2015.1.4-2.el7ost
- openstack-neutron-sriov-nic-agent-0:2015.1.4-2.el7ost
- openstack-neutron-vmware-0:2015.1.4-2.el7ost
- python-neutron-0:2015.1.4-2.el7ost
- python-neutron-tests-0:2015.1.4-2.el7ost
|