CVE-2015-8914

Critical

Published: 17/06/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The IPTables firewall in OpenStack Neutron before 7.0.4 and from 8.0.0 to 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism, potentially leading to denial of service or interception of network traffic via a link-local source address.

Risk Assessment

Organizations may be exposed to attacks that lead to denial of service or data interception, resulting in loss of confidentiality and availability of information.

Recommendation

It is recommended to update OpenStack Neutron to the latest version to mitigate this vulnerability and implement additional security measures to protect against potential attacks.

Original NVD description (English source)

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address.