OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism

CRITICAL 9.1CVE-2015-8914 · GHSA-3vj4-cvjp-482h · PYSEC-2026-431 · Published 17/06/2016 · updated 17/06/2026

Package	Affected versions	Patched versions
neutron PyPI	`≥ 8.0.0, < 8.1.1< 7.0.5`	`8.1.17.0.5`
neutron openstack	`≥ 7.0.0, < 7.0.4≥ 8.0.0, ≤ 8.1.0`	`7.0.4`

Description

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2015-8914 · ADVISORY
access.redhat.com/errata/RHSA-2016:1473 · WEB
access.redhat.com/errata/RHSA-2016:1474 · WEB
bugs.launchpad.net/neutron/+bug/1502933 · WEB
openstack/neutron · PACKAGE
review.openstack.org · WEB
review.openstack.org · WEB
review.openstack.org · WEB
security.openstack.org/ossa/OSSA-2016-009.html · WEB
openwall.com/lists/oss-security/2016/06/10/5 · WEB
openwall.com/lists/oss-security/2016/06/10/6 · WEB
review.openstack.org · Third Party Advisory
review.openstack.org · Third Party Advisory
review.openstack.org · Third Party Advisory
pypi.org/project/neutron · PACKAGE
GitHub Advisory GHSA-3vj4-cvjp-482h · ADVISORY

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free