Back to CVE Browser

CVE-2015-8914

CRITICAL

9.1

CVSS Severity Score

EPSS Score0.1640%

EPSS Percentile30.01th

PublishedJun 17, 2016

Last ModifiedMay 6, 2026

Vulnerability Description

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address.

Affected Platforms (CPE)

📦

Openstack

Neutron

>= 7.0.0 and < 7.0.4

📦

Openstack

Neutron

>= 8.0.0 and <= 8.1.0

References & Advisories

🔗 http://www.openwall.com/lists/oss-security/2016/06/10/5

🔗 http://www.openwall.com/lists/oss-security/2016/06/10/6

🔗 https://access.redhat.com/errata/RHSA-2016:1473

🔗 https://access.redhat.com/errata/RHSA-2016:1474

🔗 https://bugs.launchpad.net/neutron/+bug/1502933

🔗 https://review.openstack.org/#/c/300233/

🔗 https://review.openstack.org/#/c/310648/

🔗 https://review.openstack.org/#/c/310652/

Related Vulnerabilities

CVE-2023-41789.8

Authentication Bypass by Spoofing vulnerability in Neutron Neutron Smart VMS allows Authentication Bypass. This issue affects Neu...

CVE-2021-385989.1

OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address impersonation when the linuxbridge driver ...

CVE-2014-01879.0

The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated u...

CVE-2016-53628.2

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended DHCP...