Vulnerabilities > Openstack > Neutron > High

DATE CVE VULNERABILITY TITLE RISK
2021-05-28 CVE-2021-20267 Insufficient Verification of Data Authenticity vulnerability in multiple products
A flaw was found in openstack-neutron's default Open vSwitch firewall rules.
network
low complexity
openstack redhat CWE-345
7.1
2016-06-17 CVE-2016-5363 7PK - Security Features vulnerability in Openstack Neutron
The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended MAC-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via (1) a crafted DHCP discovery message or (2) crafted non-IP traffic.
network
low complexity
openstack CWE-254
8.2
2016-06-17 CVE-2016-5362 7PK - Security Features vulnerability in Openstack Neutron
The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended DHCP-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a crafted DHCP discovery message.
network
low complexity
openstack CWE-254
8.2