Back to CVE Browser

CVE-2016-5362

HIGH

8.2

CVSS Severity Score

EPSS Score0.0580%

EPSS Percentile41.08th

PublishedJun 17, 2016

Last ModifiedMay 6, 2026

Vulnerability Description

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended DHCP-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a crafted DHCP discovery message.

Affected Platforms (CPE)

📦

Openstack

Neutron

>= 7.0.0 and < 7.0.4

📦

Openstack

Neutron

>= 8.0.0 and <= 8.1.0

References & Advisories

🔗 http://www.openwall.com/lists/oss-security/2016/06/10/5

🔗 http://www.openwall.com/lists/oss-security/2016/06/10/6

🔗 https://access.redhat.com/errata/RHSA-2016:1473

🔗 https://access.redhat.com/errata/RHSA-2016:1474

🔗 https://bugs.launchpad.net/neutron/+bug/1558658

🔗 https://review.openstack.org/#/c/300202/

🔗 https://review.openstack.org/#/c/303563/

🔗 https://review.openstack.org/#/c/303572/

Related Vulnerabilities

CVE-2023-41789.8

Authentication Bypass by Spoofing vulnerability in Neutron Neutron Smart VMS allows Authentication Bypass. This issue affects Neu...

CVE-2015-89149.1

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMP...

CVE-2021-385989.1

OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address impersonation when the linuxbridge driver ...

CVE-2014-01879.0

The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated u...