Skip to content
OpenAdvisories
Critical RHSA-2016:1474 3 CVEs

Red Hat Security Advisory: openstack-neutron security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 25

ReleasePackageFixed in
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron-bigswitch 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron-brocade 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron-cisco 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron-common 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron-embrane 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron-ibm 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron-linuxbridge 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron-mellanox 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron-metaplugin 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron-metering-agent 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron-midonet 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron-ml2 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron-nec 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron-nuage 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron-ofagent 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron-oneconvergence-nvsd 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron-opencontrail 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron-openvswitch 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron-ovsvapp 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron-plumgrid 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron-sriov-nic-agent 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-neutron-vmware 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 python-neutron 0:2015.1.4-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 python-neutron-tests 0:2015.1.4-2.el7ost

Vulnerabilities 3

  • Critical 9.1
    CVE-2015-8914

    OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism

    The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source …

    neutron neutron Debian PyPI
  • High 8.2
    CVE-2016-5362

    OpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism

    The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended DHCP-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a crafted DHCP discove…

    neutron neutron Debian PyPI
  • High 8.2
    CVE-2016-5363

    OpenStack Neutron Intended MAC-spoofing protection mechanism bypass

    The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended MAC-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via (1) a crafted DHCP disc…

    neutron neutron Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1311864
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1345889
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1345891
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1345892
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1347428
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1350400
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1474.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-8914
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-8914
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-8914
  • report
    https://access.redhat.com/security/cve/CVE-2016-5362
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-5362
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-5362
  • report
    https://access.redhat.com/security/cve/CVE-2016-5363
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-5363
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-5363