PT-2021-22236 · Openstack+3 · Openstack Neutron+3

Jake Yip + 1 · Published 2021-08-23 · Updated 2024-08-07 · CVE-2021-38598

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenStack Neutron versions prior to 16.4.1 OpenStack Neutron 17.x versions prior to 17.1.3 OpenStack Neutron version 18.0.0

Description The issue allows hardware address impersonation when the linuxbridge driver with ebtables-nft is used on a Netfilter-based platform. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the hardware addresses of other systems on the network, resulting in denial of service or in some cases possibly interception of traffic intended for other destinations.

Recommendations For OpenStack Neutron versions prior to 16.4.1, update to version 16.4.1 or later. For OpenStack Neutron 17.x versions prior to 17.1.3, update to version 17.1.3 or later. For OpenStack Neutron version 18.0.0, update to a version later than 18.0.0. As a temporary workaround, consider restricting access to the virtual switch to minimize the risk of exploitation.

Exploit

Fix

DoS

Authentication Bypass by Spoofing

Incorrect Authorization

Weakness Enumeration

CWE-290

CWE-863

Related Identifiers

ALT-PU-2024-10658

ALT-PU-2024-1575

CVE-2021-38598

DSA-4983-1

GHSA-HVM4-MC7M-22W4

PYSEC-2021-360

USN-6067-1

Affected Products

Alt Linux

Linuxmint

Openstack Neutron

Ubuntu

References · 26

• 🔥 https://launchpad.net/bugs/1938670 · Exploit
• https://ubuntu.com/security/CVE-2022-3277 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-40797 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-38598 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38598 · Security Note
• https://osv.dev/vulnerability/USN-6067-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-38598 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-20267 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-38598 · Security Note
• https://ubuntu.com/security/CVE-2021-38598 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hvm4-mc7m-22w4 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-360 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6067-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-40085 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-38598 · Vendor Advisory