OpenStack / Neutron
26 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-55707 | openstack-neutron: openstack-neutron: Shared-network consumer can re-scope another project's subnets via subnetpool onboarding | HIGH | 7.1 | Aug 5, 2026 |
| CVE-2026-50266 | openstack-neutron: OpenStack Neutron: Network spoofing via incorrect port RBAC policies | MEDIUM | 6.6 | Jun 4, 2026 |
| CVE-2026-49299 | openstack-neutron: OpenStack Neutron: Unauthorized tag modification due to policy enforcement mismatch | MEDIUM | 5.3 | May 28, 2026 |
| CVE-2024-53916 | openstack-neutron: tagging.py can use an incorrect ID during policy enforcement | MEDIUM | 6.9 | Nov 24, 2024 |
| CVE-2022-3277 | openstack-neutron: unrestricted creation of security groups | MEDIUM | 6.5 | Mar 6, 2023 |
| CVE-2021-40797 | openstack-neutron: Routes middleware memory leak for nonexistent controllers | HIGH | 7.1 | Sep 8, 2021 |
| CVE-2021-40085 | openstack-neutron: arbitrary dnsmasq reconfiguration via extra_dhcp_opts | HIGH | 7.1 | Aug 31, 2021 |
| CVE-2021-38598 | openstack-neutron: Linuxbridge ARP filter bypass on Netfilter platforms | HIGH | 8.8 | Aug 23, 2021 |
| CVE-2021-20267 | openstack-neutron: Anti-spoofing bypass using Open vSwitch | HIGH | 7.1 | May 28, 2021 |
| CVE-2019-10876 | openstack-neutron: DOS via broken port range merging in security group | HIGH | 7.1 | Apr 5, 2019 |
| CVE-2019-9735 | openstack-neutron: incorrect validation of port settings in iptables security group driver | HIGH | 7.1 | Mar 13, 2019 |
| CVE-2018-14636 | openstack-neutron: eavesdropping private traffic due to trunk ports after live migration | MEDIUM | 6.0 | Sep 10, 2018 |
| CVE-2018-14635 | openstack-neutron: A router interface out of subnet IP range results in a denial of service | HIGH | 7.1 | Sep 10, 2018 |
| CVE-2017-7543 | openstack-neutron: iptables not active after update | MEDIUM | 5.9 | Jul 26, 2018 |
| CVE-2016-5363 | openstack-neutron: MAC source address spoofing vulnerability | HIGH | 8.2 | Jun 17, 2016 |
| CVE-2016-5362 | openstack-neutron: DHCP spoofing vulnerability | HIGH | 8.2 | Jun 17, 2016 |
| CVE-2015-8914 | openstack-neutron: ICMPv6 source address spoofing vulnerability | CRITICAL | 9.1 | Jun 17, 2016 |
| CVE-2015-5240 | openstack-neutron: Firewall rules bypass through port update | LOW | 3.5 | Oct 27, 2015 |
| CVE-2015-3221 | openstack-neutron: L2 agent DoS through incorrect allowed address pairs | MEDIUM | 4.0 | Aug 26, 2015 |
| CVE-2014-8153 | openstack-neutron: L3 agent denial of service with radvd 2.0+ (OSSA 2015-001) | MEDIUM | 4.0 | Jan 15, 2015 |
| CVE-2014-7821 | openstack-neutron: DoS via maliciously crafted dns_nameservers | MEDIUM | 4.0 | Nov 24, 2014 |
| CVE-2014-3632 | openstack-neutron: regression of fix for CVE-2013-6433 | HIGH | 7.6 | Oct 7, 2014 |
| CVE-2014-6414 | openstack-neutron: Admin-only network attributes may be reset to defaults by non-privileged users | MEDIUM | 4.0 | Oct 2, 2014 |
| CVE-2014-4615 | pycadf: token leak to message queue | MEDIUM | 5.0 | Aug 19, 2014 |
| CVE-2014-3555 | openstack-neutron: Denial of Service in Neutron allowed address pair | MEDIUM | 4.0 | Jul 23, 2014 |
Showing 1 to 25 of 26 CVEs