VDB
KO
CRITICAL 9.1

GHSA-3vj4-cvjp-482h

OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism

Details

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / neutron
Introduced in: 0 Fixed in: 7.0.5
Fix pip install --upgrade 'neutron>=7.0.5'
PyPI / neutron
Introduced in: 8.0.0 Fixed in: 8.1.1
Fix pip install --upgrade 'neutron>=8.1.1'

References