cve.bz

CVE-2015-8914

9.1 criticalEPSS 4.3%

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address.

Severity

CVSS 3.0

9.1 critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS
4.3% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE
CWE-254
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-3vj4-cvjp-482hPyPIneutron<7.0.57.0.5
GHSA-3vj4-cvjp-482hPyPIneutron>=8.0.0 <8.1.18.1.1
PYSEC-2026-431PyPIneutron<7.0.5
>=8.0.0 <8.1.1		7.0.5, 8.1.1

References

Check your stackJSON