OpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism

Also known as GHSA-qpwc-p365-pqrr, PYSEC-2026-854

Published 10 y ago 2016-06-17 · modified 4 mo ago 2026-07-07 · JSON

CVSS

8.2

v3.0 · NVD

CISA KEV

not known exploited

EPSS

3.4%

percentile 89%

Public exploits

none known

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended DHCP-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a crafted DHCP discovery message.

Exploit prediction (EPSS)

3.44% probability of exploitation in the next 30 days, higher than 89% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	8.2	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H`
NVD	2.0	6.4	`AV:N/AC:L/Au:N/C:P/I:N/A:P`
OSV	3.0	8.2	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H`
GitHub	3.0	8.2	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H`

Affected packages

Ecosystem	Package	Affected	Fixed in
pypi	`neutron`	<7.0.5 >=8.0.0, <8.1.1	7.0.5 8.1.1

Classification

Weakness

CWE-254 7PK - Security Features
CWE-923 Improper Restriction of Communication Channel to Intended Endpoints

References

access.redhat.com /errata/RHSA-2016:1473 · vendor-advisory, x_refsource_REDHAT, x_transferred
openwall.com /lists/oss-security/2016/06/10/5 · mailing-list, x_refsource_MLIST, x_transferred
openwall.com /lists/oss-security/2016/06/10/6 · mailing-list, x_refsource_MLIST, x_transferred
security.openstack.org /ossa/OSSA-2016-009.html · x_refsource_CONFIRM, x_transferred
bugs.launchpad.net /neutron/+bug/1558658 · x_refsource_CONFIRM, x_transferred
review.openstack.org /#/c/303572/ · x_refsource_CONFIRM, x_transferred
review.openstack.org /#/c/300202/ · x_refsource_CONFIRM, x_transferred
access.redhat.com /errata/RHSA-2016:1474 · vendor-advisory, x_refsource_REDHAT, x_transferred
review.openstack.org /#/c/303563/ · x_refsource_CONFIRM, x_transferred
nvd.nist.gov /vuln/detail/CVE-2016-5362 · advisory
github.com /openstack/neutron · package
review.openstack.org /#/c/300202 · web
review.openstack.org /#/c/303563 · web
review.openstack.org /#/c/303572 · web
pypi.org /project/neutron · package
github.com /advisories/GHSA-qpwc-p365-pqrr · advisory

Sources

CVE List: CVE-2016-5362
GitHub Advisory: GHSA-qpwc-p365-pqrr
NVD: CVE-2016-5362
OSV: PYSEC-2026-854

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.