Skip to content
OpenAdvisories
Critical RHSA-2016:1473 3 CVEs

Red Hat Security Advisory: openstack-neutron security and bug fix update

Published Sep 13, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 22

ReleasePackageFixed in
Red Hat · OpenStack 8 openstack:8::el7 openstack-neutron 1:7.0.4-11.el7ost
Red Hat · OpenStack 8 openstack:8::el7 openstack-neutron-bigswitch 1:7.0.4-11.el7ost
Red Hat · OpenStack 8 openstack:8::el7 openstack-neutron-brocade 1:7.0.4-11.el7ost
Red Hat · OpenStack 8 openstack:8::el7 openstack-neutron-cisco 1:7.0.4-11.el7ost
Red Hat · OpenStack 8 openstack:8::el7 openstack-neutron-common 1:7.0.4-11.el7ost
Red Hat · OpenStack 8 openstack:8::el7 openstack-neutron-dev-server 1:7.0.4-11.el7ost
Red Hat · OpenStack 8 openstack:8::el7 openstack-neutron-embrane 1:7.0.4-11.el7ost
Red Hat · OpenStack 8 openstack:8::el7 openstack-neutron-linuxbridge 1:7.0.4-11.el7ost
Red Hat · OpenStack 8 openstack:8::el7 openstack-neutron-mellanox 1:7.0.4-11.el7ost
Red Hat · OpenStack 8 openstack:8::el7 openstack-neutron-metering-agent 1:7.0.4-11.el7ost
Red Hat · OpenStack 8 openstack:8::el7 openstack-neutron-midonet 1:7.0.4-11.el7ost
Red Hat · OpenStack 8 openstack:8::el7 openstack-neutron-ml2 1:7.0.4-11.el7ost
Red Hat · OpenStack 8 openstack:8::el7 openstack-neutron-nuage 1:7.0.4-11.el7ost
Red Hat · OpenStack 8 openstack:8::el7 openstack-neutron-ofagent 1:7.0.4-11.el7ost
Red Hat · OpenStack 8 openstack:8::el7 openstack-neutron-oneconvergence-nvsd 1:7.0.4-11.el7ost
Red Hat · OpenStack 8 openstack:8::el7 openstack-neutron-opencontrail 1:7.0.4-11.el7ost
Red Hat · OpenStack 8 openstack:8::el7 openstack-neutron-openvswitch 1:7.0.4-11.el7ost
Red Hat · OpenStack 8 openstack:8::el7 openstack-neutron-ovsvapp 1:7.0.4-11.el7ost
Red Hat · OpenStack 8 openstack:8::el7 openstack-neutron-rpc-server 1:7.0.4-11.el7ost
Red Hat · OpenStack 8 openstack:8::el7 openstack-neutron-sriov-nic-agent 1:7.0.4-11.el7ost
Red Hat · OpenStack 8 openstack:8::el7 python-neutron 1:7.0.4-11.el7ost
Red Hat · OpenStack 8 openstack:8::el7 python-neutron-tests 1:7.0.4-11.el7ost

Vulnerabilities 3

  • Critical 9.1
    CVE-2015-8914

    OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism

    The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source …

    neutron neutron Debian PyPI
  • High 8.2
    CVE-2016-5362

    OpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism

    The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended DHCP-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a crafted DHCP discove…

    neutron neutron Debian PyPI
  • High 8.2
    CVE-2016-5363

    OpenStack Neutron Intended MAC-spoofing protection mechanism bypass

    The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended MAC-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via (1) a crafted DHCP disc…

    neutron neutron Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1330778
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1345889
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1345891
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1345892
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1473.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-8914
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-8914
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-8914
  • report
    https://access.redhat.com/security/cve/CVE-2016-5362
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-5362
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-5362
  • report
    https://access.redhat.com/security/cve/CVE-2016-5363
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-5363
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-5363