VDB
KO
HIGH 8.2

GHSA-qpwc-p365-pqrr

OpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism

Details

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended DHCP-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a crafted DHCP discovery message.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / neutron
Introduced in: 0 Fixed in: 7.0.5
Fix pip install --upgrade 'neutron>=7.0.5'
PyPI / neutron
Introduced in: 8.0.0 Fixed in: 8.1.1
Fix pip install --upgrade 'neutron>=8.1.1'

References