Red Hat Security Advisory

RHSA-2016:1473

openstack-neutron security and bug fix update

Released 2016-07-20 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 8.0 (Liberty) openstack-neutron-1:7.0.4-11.el7ost, openstack-neutron-bigswitch-1:7.0.4-11.el7ost, openstack-neutron-brocade-1:7.0.4-11.el7ost +19

Fixes 3 records

TI-2015-07327 CVE-2015-8914 · GHSA-3vj4-cvjp-482h

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows…

MEDIUM 46

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept n…

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.04283 Published 2016-06-17 Partial fix · 7.0.5, 8.1.1 CWE-254

TI-2016-04653 CVE-2016-5362 · GHSA-qpwc-p365-pqrr

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows…

MEDIUM 42

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended DHCP-spoofing protection mechanism and consequently cause a denial of service or intercept net…

CVSS 3.0HIGH 8.2 Network No auth No interaction EPSS 0.03439 Published 2016-06-17 Partial fix · 7.0.5, 8.1.1 CWE-254

TI-2016-04654 CVE-2016-5363 · GHSA-9pp3-cvmq-9p22

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows…

MEDIUM 41

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended MAC-spoofing protection mechanism and consequently cause a denial of service or intercept netw…

CVSS 3.0HIGH 8.2 Network No auth No interaction EPSS 0.03266 Published 2016-06-17 Partial fix · 7.1.0, 8.1.0 CWE-254