p PatchFirst

CVE-2021-38598

CVE-2021-38598

This page contains facts from public vulnerability sources. Check the original advisory before updating.

OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address impersonation when the linuxbridge driver with ebtables-nft is used on a Netfilter-based platform. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the hardware addresses of other systems on the network, resulting in denial of service or in some cases possibly interception of traffic intended for other destinations.

CVSS 9.1 · Critical · EPSS 1.2% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • neutron Debian:12

    Affected ranges
    • ECOSYSTEM: < 2:18.1.0-2

    Update to 2:18.1.0-2

  • neutron Debian:13

    Affected ranges
    • ECOSYSTEM: < 2:18.1.0-2

    Update to 2:18.1.0-2

  • neutron Debian:14

    Affected ranges
    • ECOSYSTEM: < 2:18.1.0-2

    Update to 2:18.1.0-2

  • neutron PyPI

    Versions
    • 0.0
    • 10.0.5
    • 10.0.6
    • 10.0.7
    • 11.0.3
    • 11.0.4
    • 11.0.5
    • 11.0.6
    • 11.0.7
    • 11.0.8
    • 12.0.0
    • 12.0.0.0b3
    • 12.0.0.0rc1
    • 12.0.0.0rc2
    • 12.0.1
    • 12.0.2
    • 12.0.3
    • 12.0.4
    • 12.0.5
    • 12.0.6
    • 12.1.0
    • 12.1.1
    • 13.0.0
    • 13.0.0.0b1
    • 13.0.0.0b2
    • 13.0.0.0b3
    • 13.0.0.0rc1
    • 13.0.0.0rc2
    • 13.0.1
    • 13.0.2
    • 13.0.3
    • 13.0.4
    • 13.0.5
    • 13.0.6
    • 13.0.7
    • 14.0.0
    • 14.0.0.0b1
    • 14.0.0.0b2
    • 14.0.0.0b3
    • 14.0.0.0rc1
    • 14.0.1
    • 14.0.2
    • 14.0.3
    • 14.0.4
    • 14.1.0
    • 14.2.0
    • 14.3.0
    • 14.3.1
    • 14.4.0
    • 14.4.1
    • 14.4.2
    • 15.0.0
    • 15.0.0.0b1
    • 15.0.0.0rc1
    • 15.0.0.0rc2
    • 15.0.1
    • 15.0.2
    • 15.1.0
    • 15.2.0
    • 15.3.0
    • 15.3.1
    • 15.3.2
    • 15.3.3
    • 15.3.4
    • 16.0.0
    • 16.0.0.0b1
    • 16.0.0.0rc1
    • 16.0.0.0rc2
    • 16.1.0
    • 16.2.0
    • 16.3.0
    • 16.3.1
    • 16.3.2
    • 16.4.0
    Affected ranges
    • ECOSYSTEM: < 16.4.1

    Update to 16.4.1

  • neutron PyPI

    Versions
    • 17.0.0
    • 17.1.0
    • 17.1.1
    • 17.1.2
    Affected ranges
    • ECOSYSTEM: ≥ 17.0.0, < 17.1.3

    Update to 17.1.3

  • neutron PyPI

    Versions
    • 18.0.0

    No fix published

  • neutron PyPI

    Versions
    • 0.0
    • 10.0.5
    • 10.0.6
    • 10.0.7
    • 11.0.3
    • 11.0.4
    • 11.0.5
    • 11.0.6
    • 11.0.7
    • 11.0.8
    • 12.0.0
    • 12.0.0.0b3
    • 12.0.0.0rc1
    • 12.0.0.0rc2
    • 12.0.1
    • 12.0.2
    • 12.0.3
    • 12.0.4
    • 12.0.5
    • 12.0.6
    • 12.1.0
    • 12.1.1
    • 13.0.0
    • 13.0.0.0b1
    • 13.0.0.0b2
    • 13.0.0.0b3
    • 13.0.0.0rc1
    • 13.0.0.0rc2
    • 13.0.1
    • 13.0.2
    • 13.0.3
    • 13.0.4
    • 13.0.5
    • 13.0.6
    • 13.0.7
    • 14.0.0
    • 14.0.0.0b1
    • 14.0.0.0b2
    • 14.0.0.0b3
    • 14.0.0.0rc1
    • 14.0.1
    • 14.0.2
    • 14.0.3
    • 14.0.4
    • 14.1.0
    • 14.2.0
    • 14.3.0
    • 14.3.1
    • 14.4.0
    • 14.4.1
    • 14.4.2
    • 15.0.0
    • 15.0.0.0b1
    • 15.0.0.0rc1
    • 15.0.0.0rc2
    • 15.0.1
    • 15.0.2
    • 15.1.0
    • 15.2.0
    • 15.3.0
    • 15.3.1
    • 15.3.2
    • 15.3.3
    • 15.3.4
    • 16.0.0
    • 16.0.0.0b1
    • 16.0.0.0rc1
    • 16.0.0.0rc2
    • 16.1.0
    • 16.2.0
    • 16.3.0
    • 16.3.1
    • 16.3.2
    • 16.4.0
    • 17.0.0
    • 17.1.0
    • 17.1.1
    • 17.1.2
    • 18.0.0
    Affected ranges
    • ECOSYSTEM: < 16.4.1 ∪ ≥ 17.0.0, < 17.1.3 ∪ ≥ 18.0.0, < 18.1.0

    Update to 16.4.1; Update to 17.1.3; Update to 18.1.0

  • neutron Ubuntu:16.04:LTS

    Versions
    • 2:7.0.0-0ubuntu1
    • 2:8.0.0~b1-0ubuntu2
    • 2:8.0.0~b2-0ubuntu4
    • 2:8.0.0~b2-0ubuntu5
    • 2:8.0.0~b2-0ubuntu7
    • 2:8.0.0~b3-0ubuntu1
    • 2:8.0.0~rc1-0ubuntu1
    • 2:8.0.0-0ubuntu1
    • 2:8.1.0-0ubuntu0.16.04.2
    • 2:8.1.2-0ubuntu1
    • 2:8.2.0-0ubuntu1
    • 2:8.3.0-0ubuntu1
    • 2:8.3.0-0ubuntu1.1
    • 2:8.3.0-0ubuntu1.2
    • 2:8.4.0-0ubuntu1
    • 2:8.4.0-0ubuntu2
    • 2:8.4.0-0ubuntu3
    • 2:8.4.0-0ubuntu4
    • 2:8.4.0-0ubuntu5
    • 2:8.4.0-0ubuntu6
    • 2:8.4.0-0ubuntu7.1
    • 2:8.4.0-0ubuntu7.2
    • 2:8.4.0-0ubuntu7.3
    • 2:8.4.0-0ubuntu7.4
    • 2:8.4.0-0ubuntu7.5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • neutron Ubuntu:18.04:LTS

    Versions
    • 2:11.0.1-0ubuntu1
    • 2:12.0.0~b1-0ubuntu1
    • 2:12.0.0~b1-0ubuntu2
    • 2:12.0.0~b2-0ubuntu1
    • 2:12.0.0~b3-0ubuntu1
    • 2:12.0.0~rc1-0ubuntu1
    • 2:12.0.0~rc2-0ubuntu1
    • 2:12.0.0-0ubuntu1
    • 2:12.0.0-0ubuntu1.1
    • 2:12.0.0-0ubuntu1.2
    • 2:12.0.0-0ubuntu1.3
    • 2:12.0.0-0ubuntu1.4
    • 2:12.0.0-0ubuntu2
    • 2:12.0.0-0ubuntu3
    • 2:12.0.1-0ubuntu1
    • 2:12.0.1-0ubuntu1.1
    • 2:12.0.2-0ubuntu1
    • 2:12.0.3-0ubuntu1
    • 2:12.0.5-0ubuntu1
    • 2:12.0.5-0ubuntu4
    • 2:12.0.5-0ubuntu5
    • 2:12.0.6-0ubuntu1
    • 2:12.0.6-0ubuntu2
    • 2:12.0.6-0ubuntu3
    • 2:12.1.0-0ubuntu1
    • 2:12.1.1-0ubuntu1
    • 2:12.1.1-0ubuntu2
    • 2:12.1.1-0ubuntu3
    • 2:12.1.1-0ubuntu4
    • 2:12.1.1-0ubuntu7
    • 2:12.1.1-0ubuntu8
    Affected ranges
    • ECOSYSTEM: < 2:12.1.1-0ubuntu8.1

    Update to 2:12.1.1-0ubuntu8.1

  • neutron Ubuntu:20.04:LTS

    Versions
    • 2:15.0.0-0ubuntu1
    • 2:16.0.0~b1~git2019121613.3e8abb9a8f-0ubuntu1
    • 2:16.0.0~b2~git2020020712.d5b33ffc77-0ubuntu1
    • 2:16.0.0~b2~git2020020712.d5b33ffc77-0ubuntu3
    • 2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu1
    • 2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu2
    • 2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu3
    • 2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu4
    • 2:16.0.0~b3~git2020041013.e74c8f8c88-0ubuntu1
    • 2:16.0.0~b3~git2020041516.5f42488a9a-0ubuntu1
    • 2:16.0.0~b3~git2020041516.5f42488a9a-0ubuntu2
    • 2:16.0.0-0ubuntu0.20.04.1
    • 2:16.0.0-0ubuntu0.20.04.2
    • 2:16.1.0-0ubuntu1
    • 2:16.1.0-0ubuntu2
    • 2:16.2.0-0ubuntu1
    • 2:16.2.0-0ubuntu2
    • 2:16.2.0-0ubuntu3
    • 2:16.3.0-0ubuntu3
    • 2:16.3.1-0ubuntu1
    • 2:16.3.1-0ubuntu1.1
    • 2:16.3.2-0ubuntu2
    • 2:16.3.2-0ubuntu3
    • 2:16.4.0-0ubuntu2
    • 2:16.4.0-0ubuntu3
    • 2:16.4.1-0ubuntu2
    • 2:16.4.2-0ubuntu1
    • 2:16.4.2-0ubuntu2
    • 2:16.4.2-0ubuntu3
    • 2:16.4.2-0ubuntu4
    • 2:16.4.2-0ubuntu5
    • 2:16.4.2-0ubuntu6
    • 2:16.4.2-0ubuntu6.1
    Affected ranges
    • ECOSYSTEM: < 2:16.4.2-0ubuntu6.2

    Update to 2:16.4.2-0ubuntu6.2

Original sources

Check your server →