CVE-2021-20267
Description
A flaw was found in openstack-neutrons default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the IPv6 addresses of other systems on the network, resulting in denial of service or in some cases possibly interception of traffic intended for other destinations. Only deployments using the Open vSwitch driver are affected. Source: OpenStack project. Versions before openstack-neutron 15.3.3, openstack-neutron 16.3.1 and openstack-neutron 17.1.1 are affected.
Risk Information
Base Score
7.1
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
EPSS Score
Exploitation Probability
0.123
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2021-20267 are fixed in Python-neutron 15.3.3 | Windows |
| Vulnerabilities CVE-2021-20267 are fixed in Python-neutron 16.3.1 | Windows |
| Vulnerabilities CVE-2021-20267 are fixed in Python-neutron 17.1.1 | Windows |
| OpenStack Virtual Network Service (USN-6067-1) python-neutron_12.1.1-0ubuntu8.1_all.deb | Linux |
| OpenStack Virtual Network Service (USN-6067-1) python3-neutron_16.4.2-0ubuntu6.2_all.deb | Linux |
| OpenStack Virtual Network Service (USN-6067-1) python3-neutron_20.3.0-0ubuntu1.1_all.deb | Linux |
| Vulnerabilities CVE-2021-20267 are fixed in Python-neutron for linux 15.3.3 | Linux |
| Vulnerabilities CVE-2021-20267 are fixed in Python-neutron for linux 16.3.1 | Linux |
| Vulnerabilities CVE-2021-20267 are fixed in Python-neutron for linux 17.1.1 | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234