OpenStack Neutron Intended MAC-spoofing protection mechanism bypass

HIGH 8.2CVE-2016-5363 · GHSA-9pp3-cvmq-9p22 · PYSEC-2026-852 · Published 17/06/2016 · updated 17/06/2026

Package	Affected versions	Patched versions
neutron PyPI	`≥ 8.0.0, < 8.1.0< 7.1.0`	`8.1.07.1.0`
neutron openstack	`= 7.0.0= 7.0.1= 7.0.2= 7.0.3= 7.0.4= 8.0.0= 8.1.0`	No fix yet

Description

The IPTables firewall in OpenStack Neutron up to 7.0.4 and 8.x before 8.1.0 allows remote attackers to bypass an intended MAC-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via (1) a crafted DHCP discovery message or (2) crafted non-IP traffic.

NVD description

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended MAC-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via (1) a crafted DHCP discovery message or (2) crafted non-IP traffic.

References

nvd.nist.gov/vuln/detail/CVE-2016-5363 · ADVISORY
openstack/neutron commit 5853af9 · WEB
openstack/neutron commit 6a93ee8 · WEB
openstack/neutron commit 997d7b0 · WEB
openstack/neutron commit fd5fd25 · WEB
access.redhat.com/errata/RHSA-2016:1473 · WEB
access.redhat.com/errata/RHSA-2016:1474 · WEB
bugs.launchpad.net/neutron/+bug/1558658 · WEB
openstack/neutron · PACKAGE
review.openstack.org · WEB
review.openstack.org · WEB
review.openstack.org · WEB
security.openstack.org/ossa/OSSA-2016-009.html · WEB
openwall.com/lists/oss-security/2016/06/10/5 · WEB
openwall.com/lists/oss-security/2016/06/10/6 · WEB
review.openstack.org
review.openstack.org
review.openstack.org
pypi.org/project/neutron · PACKAGE
GitHub Advisory GHSA-9pp3-cvmq-9p22 · ADVISORY

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free