CVSS 3.0
8.2 highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:HCVE-2016-5363
High (8.2) in openstack neutron. EPSS 3.3% chance of exploitation in the next 30 days. Fixed in neutron 7.1.0, 8.1.0.
The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended MAC-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via (1) a crafted DHCP discovery message or (2) crafted non-IP traffic.
Severity
- EPSS
- 3.3% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
- CWE
- CWE-254
- Published
- Modified
- Record from
- the NVD, synced
Affected
- openstack:neutron
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-9pp3-cvmq-9p22 | PyPI | neutron | <7.1.0 | 7.1.0 |
| GHSA-9pp3-cvmq-9p22 | PyPI | neutron | >=8.0.0 <8.1.0 | 8.1.0 |
| PYSEC-2026-852 | PyPI | neutron | <7.1.0 >=8.0.0 <8.1.0 | 7.1.0, 8.1.0 |