Skip to content
OpenAdvisories

Package · Ubuntu

neutron

20 known vulnerabilities.

3 results · Clear filters · Feed

  • High 7.1

    In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An a…

  • High 7.5

    OpenStack Neutron can use an incorrect ID during policy enforcement

    In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant is able to change (add and clear) tags on network …

  • High 7.1

    Openstack Neutron has Insufficient Verification of IPv6 addresses

    A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the IPv6 addresses of other systems on the network, resul…