CVE-2015-8914

9.1CRITICAL

Key Information

Vendor: Openstack
Status: Neutron
Vendor: CVE Published:; 17 June 2016

Summary

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address.

References

https://review.openstack.org/#/c/310652/

x_refsource_CONFIRM

https://access.redhat.com/errata/RHSA-2016:1473

vendor-advisoryx_refsource_REDHAT

http://www.openwall.com/lists/oss-security/2016/06/10/5

mailing-listx_refsource_MLIST

EPSS Score

3% chance of being exploited in the next 30 days.

CVSS V3.1

Score:

9.1

Severity:

CRITICAL

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Jun 17, 2016
Vulnerability Reserved
Jun 10, 2016

Collectors

NVD DatabaseMitre Database

.