Description
The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended DHCP-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a crafted DHCP discovery message.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | neutron | 2:8.1.2-1 | — |
| Debian 13 | neutron | 2:8.1.2-1 | — |
| Debian 12 | neutron | 2:8.1.2-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenStack 8 | python-neutron +21 | 1:7.0.4-11.el7ost | RHSA-2016:1473 |
| Red Hat OpenStack 7 | python-neutron +24 | 2015.1.4-2.el7ost | RHSA-2016:1474 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE OpenStack Cloud 6 | openstack-ceilometer | 5.0.4~a0~dev6-6.1 | SUSE-SU-2016:2143-1 |
| SUSE OpenStack Cloud 6 | openstack-ceilometer-doc | 5.0.4~a0~dev6-6.2 | SUSE-SU-2016:2143-1 |
| SUSE OpenStack Cloud 6 | openstack-cinder +1 | 7.0.3~a0~dev2-7.1 | SUSE-SU-2016:2143-1 |
| SUSE OpenStack Cloud 6 | openstack-dashboard | 8.0.2~a0~dev34-8.1 | SUSE-SU-2016:2143-1 |
| SUSE OpenStack Cloud 6 | openstack-glance +1 | 11.0.2~a0~dev13-7.1 | SUSE-SU-2016:2143-1 |
| SUSE OpenStack Cloud 6 | openstack-heat | 5.0.2~a0~dev93-9.1 | SUSE-SU-2016:2143-1 |
| SUSE OpenStack Cloud 6 | openstack-heat-doc | 5.0.2~a0~dev93-9.3 | SUSE-SU-2016:2143-1 |
| SUSE OpenStack Cloud 6 | openstack-keystone | 8.1.1~a0~dev13-3.1 | SUSE-SU-2016:2143-1 |
| SUSE OpenStack Cloud 6 | openstack-keystone-doc | 8.1.1~a0~dev13-3.2 | SUSE-SU-2016:2143-1 |
| SUSE OpenStack Cloud 6 | openstack-manila | 1.0.2~a0~dev11-9.1 | SUSE-SU-2016:2143-1 |
| SUSE OpenStack Cloud 6 | openstack-manila-doc | 1.0.2~a0~dev11-9.2 | SUSE-SU-2016:2143-1 |
| SUSE OpenStack Cloud 6 | openstack-neutron +1 | 7.1.2~a0~dev29-10.1 | SUSE-SU-2016:2143-1 |
| SUSE OpenStack Cloud 6 | openstack-neutron-fwaas +3 | 7.1.2~a0~dev1-6.1 | SUSE-SU-2016:2143-1 |
| SUSE OpenStack Cloud 6 | openstack-nova +1 | 12.0.5~a0~dev2-7.1 | SUSE-SU-2016:2143-1 |
| SUSE OpenStack Cloud 6 | openstack-resource-agents | 1.0+git.1467079370.4f2c49d-7.1 | SUSE-SU-2016:2143-1 |
| SUSE OpenStack Cloud 6 | python-networking-cisco | 2.1.1-6.1 | SUSE-SU-2016:2143-1 |
| SUSE OpenStack Cloud 6 | python-openstackclient | 1.7.2-4.1 | SUSE-SU-2016:2143-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | neutron | < 7.0.5 | 7.0.5 | GHSA-qpwc-p365-pqrr |
| PyPI | neutron | >= 8.0.0, < 8.1.1 | 8.1.1 | GHSA-qpwc-p365-pqrr |
| PyPI | neutron | < 7.0.5 · >= 8.0.0, < 8.1.1 | 7.0.5, 8.1.1 | PYSEC-2026-854 |
Advisories 3
- RHSA-2016:1474 Red Hat Security Advisory: openstack-neutron security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 1, 2026
- RHSA-2016:1473 Red Hat Security Advisory: openstack-neutron security and bug fix update Red Hat Security Advisories (RHSA) · Aug 1, 2026
- SUSE-SU-2016:2143-1 Security update for several openstack-components SUSE / openSUSE Security Updates · Feb 4, 2026
References
- RHSA-2016:1473 vendor-advisory
- [oss-security] 20160610 CVE request for vulnerability in OpenStack Neutron mailing-list
- [oss-security] 20160610 Re: CVE request for vulnerability in OpenStack Neutron mailing-list
- https://security.openstack.org/ossa/OSSA-2016-009.html
- https://bugs.launchpad.net/neutron/+bug/1558658
- https://review.openstack.org/#/c/303572/
- https://review.openstack.org/#/c/300202/
- RHSA-2016:1474 vendor-advisory
- https://review.openstack.org/#/c/303563/