| OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networksCVE-2026-50266 · GHSA-QMC5-GV6V-8P22Version ranges need review. |
neutronRed Hat OpenStack Platform 16.2/openstack-neutron |
PyPIRed Hat |
Low
|
Fix reported |
|
| Denial of service in neutronCVE-2023-3637 · GHSA-R3JH-QHGJ-GVR8Version ranges need review. |
neutronRed Hat OpenStack Platform 13 (Queens) Operational Tools/openstack-neutron |
PyPIRed Hat |
Medium
|
No fix reported |
|
| OpenStack Neutron Race Condition vulnerabilityCVE-2017-7543 · GHSA-HVXR-2FVV-C3WQVersion ranges need review. |
neutron |
PyPI |
Medium
|
Fix reported |
|
| OpenStack Neutron Improper Input Validation vulnerabilityCVE-2015-3221 · GHSA-WF44-4MGJ-RWVXVersion ranges need review. |
neutron |
PyPI |
Medium
|
Fix reported |
|
| OpenStack Keystone and other components vulnerable to Improper Certificate ValidationCVE-2013-2255 · GHSA-QH2X-HPF9-CF2GVersion ranges need review. |
cinderkeystone |
PyPIRed Hat |
Medium
|
Fix reported |
|
| OpenStack Neutron has an Incorrect Authorization issueCVE-2026-49299 · GHSA-XV24-HXH9-2HH9Version ranges need review. |
neutronRed Hat OpenStack Platform 16.2/openstack-neutron |
PyPIRed Hat |
Medium
|
Fix reported |
|
| OpenStack Neutron can use an incorrect ID during policy enforcementCVE-2024-53916 · GHSA-F27H-G923-68HWVersion ranges need review. |
neutron |
PyPI |
Medium
|
Fix reported |
|
| OpenStack Neutron Intended MAC-spoofing protection mechanism bypassCVE-2016-5363 · GHSA-9PP3-CVMQ-9P22Version ranges need review. |
neutronRed Hat Enterprise Linux OpenStack Platform 5 (Icehouse)/openstack-neutron |
PyPIRed Hat |
High
|
Fix reported |
|
| OpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanismCVE-2016-5362 · GHSA-QPWC-P365-PQRRVersion ranges need review. |
neutronRed Hat Enterprise Linux OpenStack Platform 5 (Icehouse)/openstack-neutron |
PyPIRed Hat |
High
|
Fix reported |
|
| OpenStack Neutron Improper Authentication vulnerabilityCVE-2014-0056 · GHSA-72P9-6GC7-Q93RVersion ranges need review. |
neutronRed Hat OpenStack Platform 3/openstack-quantum |
PyPIRed Hat |
Medium
|
Fix reported |
|
| OpenStack Neutron Race condition vulnerabilityCVE-2015-5240 · GHSA-HHPJ-6PJ7-WPX5Version ranges need review. |
neutron |
PyPI |
Low
|
Fix reported |
|
| openstack-neutron uncontrolled resource consumption flawCVE-2022-3277 · GHSA-W446-H7VG-WV3PVersion ranges need review. |
neutronRed Hat OpenStack Platform 13 (Queens)/openstack-neutron |
PyPIRed Hat |
Medium
|
Fix reported |
|
| OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanismCVE-2015-8914 · GHSA-3VJ4-CVJP-482HVersion ranges need review. |
neutronRed Hat Enterprise Linux OpenStack Platform 5 (Icehouse)/openstack-neutron |
PyPIRed Hat |
Critical
|
Fix reported |
|
| OpensStack Neutron Denial of Service VulnerabilityCVE-2018-14635 · GHSA-X634-34M9-96MPVersion ranges need review. |
neutronRed Hat Enterprise Linux OpenStack Platform 7 (Kilo)/openstack-neutron |
PyPIRed Hat |
High
|
Fix reported |
|
| Openstack Neutron vulnerable to eavesdropping on private trafficCVE-2018-14636 · GHSA-8Q95-JJ7P-X93XVersion ranges need review. |
neutronRed Hat OpenStack Platform 10 (Newton)/openstack-neutron |
PyPIRed Hat |
Medium
|
Fix reported |
|
| OpenStack Neutron's unsupported dport option prevents applying security groupsCVE-2019-9735 · GHSA-9773-3FQG-8W25Version ranges need review. |
neutron |
PyPI |
High
|
Fix reported |
|
| OpenStack Neutron overlapping security group rules prevents compute node network configurationCVE-2019-10876 · GHSA-JR9M-V5QH-MH2JVersion ranges need review. |
neutron |
PyPI |
High
|
Fix reported |
|
| OpenStack Neutron vulnerable to hardware address impersonationCVE-2021-38598 · GHSA-HVM4-MC7M-22W4Version ranges need review. |
neutronRed Hat OpenStack Platform 17.1/openstack-neutron |
PyPIRed Hat |
High
|
Fix reported |
|
| OpenStack Neutron Denial of Service vulnerabilityCVE-2021-40797 · GHSA-CPX3-696P-3CW9Version ranges need review. |
neutronRed Hat OpenStack Platform 10 (Newton)/openstack-neutron |
PyPIRed Hat |
High
|
Fix reported |
|
| OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts valueCVE-2021-40085 · GHSA-FH73-GJVG-349CVersion ranges need review. |
neutron |
PyPI |
High
|
Fix reported |
|
