PT-2026-53513 · Pypi · Neutron

Published 2026-06-29 · Updated 2026-06-29

OSV

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address.

Fix

Related Identifiers

PYSEC-2026-431

Affected Products

Neutron

References · 14

• https://osv.dev/vulnerability/PYSEC-2026-431 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-8914 · Security Note
• https://github.com/openstack/neutron · Note
• http://openwall.com/lists/oss-security/2016/06/10/5 · Note
• https://access.redhat.com/errata/RHSA-2016:1473 · Note
• https://pypi.org/project/neutron · Note
• https://github.com/advisories/GHSA-3vj4-cvjp-482h · Note
• https://security.openstack.org/ossa/OSSA-2016-009.html · Note
• https://review.openstack.org/#/c/300233 · Note
• https://access.redhat.com/errata/RHSA-2016:1474 · Note
• https://review.openstack.org/#/c/310648 · Note
• https://bugs.launchpad.net/neutron/+bug/1502933 · Note
• http://openwall.com/lists/oss-security/2016/06/10/6 · Note
• https://review.openstack.org/#/c/310652 · Note