CVE-2021-38598 OpenStack Neutron vulnerable to hardware address impersonation

What is CVE-2021-38598?

CVE-2021-38598 is a critical vulnerability in n/a, published on 23 Aug 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address impersonation when the linuxbridge driver with ebtables-nft is used on a Netfilter-based platform. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the hardware addresses of other systems on the network, resulting in denial of service or in some cases possibly interception of traffic intended for other destinations.

Weakness: CWE-290

Which versions are affected by CVE-2021-38598?

7 open source packages ship an affected version, including neutron. It affects 1 product.

Products include Openstack Neutron.

How do I fix CVE-2021-38598?

Upgrade neutron to a fixed version for your release line: 16.4.1, 17.1.3 or 18.1.0.

Is CVE-2021-38598 being exploited?

There is no known exploitation of CVE-2021-38598 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2015-8914 OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism Critical 9.1
• CVE-2016-5362 OpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism High 8.2
• CVE-2016-5363 OpenStack Neutron Intended MAC-spoofing protection mechanism bypass High 8.2
• CVE-2014-3632 Privilege escalation in n/a High 7.6
• CVE-2021-20267 Openstack Neutron has Insufficient Verification of IPv6 addresses High 7.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2021-38598, GHSA-hvm4-mc7m-22w4, PYSEC-2021-360, UBUNTU-CVE-2021-38598.