CVSS 3.0
8.2 highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:HCVE-2016-5362
The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended DHCP-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a crafted DHCP discovery message.
Severity
- EPSS
- 3.4% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
- CWE
- CWE-254
- Published
- Modified
- Record from
- the NVD, synced
Affected
- openstack:neutron
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-qpwc-p365-pqrr | PyPI | neutron | <7.0.5 | 7.0.5 |
| GHSA-qpwc-p365-pqrr | PyPI | neutron | >=8.0.0 <8.1.1 | 8.1.1 |
| PYSEC-2026-854 | PyPI | neutron | <7.0.5 >=8.0.0 <8.1.1 | 7.0.5, 8.1.1 |