Openstack Neutron vulnerabilities

• openstack neutron In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of... CVE-2026-55707 Fix available 7.1 HighAugust 5, 2026
• openstack neutron OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks CVE-2026-50266 Fix available 2.2 LowJune 4, 2026
• openstack neutron OpenStack Neutron has an Incorrect Authorization issue CVE-2026-49299 Fix available 5.3 MediumMay 28, 2026
• openstack neutron OpenStack Neutron can use an incorrect ID during policy enforcement CVE-2024-53916 Fix available 7.5 HighNovember 24, 2024
• openstack neutron, the openstack project openstack-neutron, redhat openstack platform +2 more openstack-neutron uncontrolled resource consumption flaw CVE-2022-3277 Fix available 6.5 MediumMarch 6, 2023
• openstack neutron OpenStack Neutron Denial of Service vulnerability CVE-2021-40797 Fix available 6.5 MediumSeptember 8, 2021
• openstack neutron, debian linux +1 more OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value CVE-2021-40085 Fix available 6.5 MediumAugust 31, 2021
• openstack neutron OpenStack Neutron vulnerable to hardware address impersonation CVE-2021-38598 Fix available 9.1 CriticalAugust 23, 2021
• openstack neutron, the openstack project openstack-neutron, redhat openstack platform +2 more Openstack Neutron has Insufficient Verification of IPv6 addresses CVE-2021-20267 Fix available 7.1 HighMay 28, 2021
• openstack neutron, redhat openstack +1 more OpenStack Neutron overlapping security group rules prevents compute node network configuration CVE-2019-10876 Fix available 6.5 MediumApril 5, 2019
• openstack neutron, redhat openstack, debian linux +2 more OpenStack Neutron's unsupported dport option prevents applying security groups CVE-2019-9735 Fix available 6.5 MediumMarch 12, 2019
• openstack neutron, the openstack project openstack-neutron +1 more Openstack Neutron vulnerable to eavesdropping on private traffic CVE-2018-14636 Fix available 5.3 MediumSeptember 10, 2018
• openstack neutron, redhat openstack, the openstack project openstack-neutron +2 more OpensStack Neutron Denial of Service Vulnerability CVE-2018-14635 Fix available 6.5 MediumSeptember 10, 2018
• openstack neutron, red hat openstack-neutron, redhat openstack +2 more OpenStack Neutron Race Condition vulnerability CVE-2017-7543 Fix available 5.3 MediumJuly 26, 2018
• openstack neutron OpenStack Neutron Intended MAC-spoofing protection mechanism bypass CVE-2016-5363 Fix available 8.2 HighJune 17, 2016
• openstack neutron OpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism CVE-2016-5362 Fix available 8.2 HighJune 17, 2016
• openstack neutron OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism CVE-2015-8914 Fix available 9.1 CriticalJune 17, 2016
• openstack neutron OpenStack Neutron Race condition vulnerability CVE-2015-5240 Fix available 3.5 LowOctober 15, 2015
• openstack neutron OpenStack Neutron Improper Input Validation vulnerability CVE-2015-3221 Public exploitFix available EPSS 11.4% 4.0 MediumAugust 26, 2015
• openstack neutron, litech router advertisement daemon +1 more The L3 agent in OpenStack Neutron 2014.2.x before 2014.2.2, when using radvd 2.0+, allows remote... CVE-2014-8153 4.0 MediumJanuary 15, 2015
• openstack neutron, redhat openstack, fedoraproject fedora +2 more OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users... CVE-2014-7821 Fix available 4.0 MediumNovember 24, 2014
• openstack neutron The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014... CVE-2014-3632 Fix available 7.6 HighOctober 7, 2014
• openstack neutron, canonical ubuntu linux +1 more OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to... CVE-2014-6414 Fix available 4.0 MediumOctober 2, 2014
• openstack neutron OpenStack Neutron allows remote authenticated users to cause a denial of service CVE-2014-3555 Fix available 4.0 MediumJuly 23, 2014
• openstack neutron, oslo, pycadf +3 more +5 more The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2... CVE-2014-4615 Fix available 5.0 MediumJune 24, 2014
• openstack neutron, canonical ubuntu linux +1 more The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2... CVE-2014-4167 Fix available 3.5 LowJune 18, 2014
• openstack neutron, canonical ubuntu linux +1 more The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not... CVE-2013-6433 Fix available 7.6 HighJune 2, 2014
• openstack neutron, canonical ubuntu linux, opensuse +2 more The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014... CVE-2014-0187 Fix available 9.0 HighApril 28, 2014
• openstack neutron, canonical ubuntu linux +1 more OpenStack Neutron Improper Authentication vulnerability CVE-2014-0056 Fix available 2.1 LowApril 1, 2014