The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended DHCP-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a crafted DHCP discovery message.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to
    bypass an intended DHCP-spoofing protection mechanism and consequently cause a denial of service or
    intercept network traffic via a crafted DHCP discovery message. (CVE-2016-5362)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to     bypass an intended DHCP-spoofing protection mechanism and consequently cause a denial of service or     intercept network traffic via a crafted DHCP discovery message. (CVE-2016-5362)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
437207	SCA: security update for neutron (GHSA-qpwc-p365-pqrr)	Tenable Cloud Security	SCA Checks	high
437207	SCA: security update for neutron (GHSA-qpwc-p365-pqrr)	Tenable Self-Hosted Container Security	SCA Checks	high
219736	Linux Distros Unpatched Vulnerability : CVE-2016-5362	Nessus	Misc.	high

Detections

Analytics

CVE-2016-5362

high

Tenable Plugins

high

high

high