PT-2016-4058 · Openstack · Openstack Neutron

Romain Aviolat · Publicado 2016-06-17 · Atualizado 2022-05-14 · CVE-2015-8914

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenStack Neutron versions prior to 7.0.4 OpenStack Neutron versions 8.0.0 through 8.1.0

Description The issue allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism, which can lead to a denial of service or the interception of network traffic via a link-local source address.

Recommendations For versions prior to 7.0.4, update to version 7.0.4 or later. For versions 8.0.0 through 8.1.0, update to a version later than 8.1.0.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-923

CWE-254

Identificadores relacionados

CVE-2015-8914

GHSA-3VJ4-CVJP-482H

RHSA-2016:1473

RHSA-2016:1474

Produtos afetados

Openstack Neutron

Referências · 18

• 🔥 https://bugs.launchpad.net/neutron/+bug/1502933 · Exploit
• https://github.com/openstack/neutron · Nota
• https://access.redhat.com/errata/RHSA-2016:1474 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2016/06/10/5 · Nota
• https://security-tracker.debian.org/tracker/CVE-2015-8914 · Aviso do Fabricante
• https://review.openstack.org/#/c/310652 · Nota
• https://security.openstack.org/ossa/OSSA-2016-009.html · Aviso do Fabricante
• https://review.openstack.org/#/c/300233 · Nota
• http://openwall.com/lists/oss-security/2016/06/10/6 · Nota
• https://access.redhat.com/errata/RHSA-2016:1473 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-8914 · Nota de Segurança
• https://review.openstack.org/#/c/310648 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-8914 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2015-8914 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-8914 · Aviso do Fabricante