UBUNTU-CVE-2021-38598

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2021-38598

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-38598.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2021-38598

Related

Published

2021-08-23T05:15:00Z

Modified

2024-10-15T14:08:21Z

Severity

9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H CVSS Calculator

Summary

[none]

Details

OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address impersonation when the linuxbridge driver with ebtables-nft is used on a Netfilter-based platform. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the hardware addresses of other systems on the network, resulting in denial of service or in some cases possibly interception of traffic intended for other destinations.

References

Affected packages

Ubuntu:Pro:16.04:LTS / neutron

Package

Name: neutron
Purl: pkg:deb/ubuntu/neutron?arch=src?distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2:7.*

2:7.0.0-0ubuntu1

2:8.*

2:8.0.0~b1-0ubuntu2

2:8.0.0~b2-0ubuntu4

2:8.0.0~b2-0ubuntu5

2:8.0.0~b2-0ubuntu7

2:8.0.0~b3-0ubuntu1

2:8.0.0~rc1-0ubuntu1

2:8.0.0-0ubuntu1

2:8.1.0-0ubuntu0.16.04.2

2:8.1.2-0ubuntu1

2:8.2.0-0ubuntu1

2:8.3.0-0ubuntu1

2:8.3.0-0ubuntu1.1

2:8.3.0-0ubuntu1.2

2:8.4.0-0ubuntu1

2:8.4.0-0ubuntu2

2:8.4.0-0ubuntu3

2:8.4.0-0ubuntu4

2:8.4.0-0ubuntu5

2:8.4.0-0ubuntu6

2:8.4.0-0ubuntu7.1

2:8.4.0-0ubuntu7.2

2:8.4.0-0ubuntu7.3

2:8.4.0-0ubuntu7.4

2:8.4.0-0ubuntu7.5

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:18.04:LTS / neutron

Package

Name: neutron
Purl: pkg:deb/ubuntu/neutron?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:12.1.1-0ubuntu8.1

Affected versions

2:11.*

2:11.0.1-0ubuntu1

2:12.*

2:12.0.0~b1-0ubuntu1

2:12.0.0~b1-0ubuntu2

2:12.0.0~b2-0ubuntu1

2:12.0.0~b3-0ubuntu1

2:12.0.0~rc1-0ubuntu1

2:12.0.0~rc2-0ubuntu1

2:12.0.0-0ubuntu1

2:12.0.0-0ubuntu1.1

2:12.0.0-0ubuntu1.2

2:12.0.0-0ubuntu1.3

2:12.0.0-0ubuntu1.4

2:12.0.0-0ubuntu2

2:12.0.0-0ubuntu3

2:12.0.1-0ubuntu1

2:12.0.1-0ubuntu1.1

2:12.0.2-0ubuntu1

2:12.0.3-0ubuntu1

2:12.0.5-0ubuntu1

2:12.0.5-0ubuntu4

2:12.0.5-0ubuntu5

2:12.0.6-0ubuntu1

2:12.0.6-0ubuntu2

2:12.0.6-0ubuntu3

2:12.1.0-0ubuntu1

2:12.1.1-0ubuntu1

2:12.1.1-0ubuntu2

2:12.1.1-0ubuntu3

2:12.1.1-0ubuntu4

2:12.1.1-0ubuntu7

2:12.1.1-0ubuntu8

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-common"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-dhcp-agent"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-l3-agent"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-linuxbridge-agent"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-macvtap-agent"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-metadata-agent"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-metering-agent"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-openvswitch-agent"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-plugin-linuxbridge-agent"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-plugin-ml2"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-plugin-openvswitch-agent"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-plugin-sriov-agent"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-server"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "neutron-sriov-agent"
        },
        {
            "binary_version": "2:12.1.1-0ubuntu8.1",
            "binary_name": "python-neutron"
        }
    ]
}

Ubuntu:20.04:LTS / neutron

Package

Name: neutron
Purl: pkg:deb/ubuntu/neutron?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:16.4.2-0ubuntu6.2

Affected versions

2:15.*

2:15.0.0-0ubuntu1

2:16.*

2:16.0.0~b1~git2019121613.3e8abb9a8f-0ubuntu1

2:16.0.0~b2~git2020020712.d5b33ffc77-0ubuntu1

2:16.0.0~b2~git2020020712.d5b33ffc77-0ubuntu3

2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu1

2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu2

2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu3

2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu4

2:16.0.0~b3~git2020041013.e74c8f8c88-0ubuntu1

2:16.0.0~b3~git2020041516.5f42488a9a-0ubuntu1

2:16.0.0~b3~git2020041516.5f42488a9a-0ubuntu2

2:16.0.0-0ubuntu0.20.04.1

2:16.0.0-0ubuntu0.20.04.2

2:16.1.0-0ubuntu1

2:16.1.0-0ubuntu2

2:16.2.0-0ubuntu1

2:16.2.0-0ubuntu2

2:16.2.0-0ubuntu3

2:16.3.0-0ubuntu3

2:16.3.1-0ubuntu1

2:16.3.1-0ubuntu1.1

2:16.3.2-0ubuntu2

2:16.3.2-0ubuntu3

2:16.4.0-0ubuntu2

2:16.4.0-0ubuntu3

2:16.4.1-0ubuntu2

2:16.4.2-0ubuntu1

2:16.4.2-0ubuntu2

2:16.4.2-0ubuntu3

2:16.4.2-0ubuntu4

2:16.4.2-0ubuntu5

2:16.4.2-0ubuntu6

2:16.4.2-0ubuntu6.1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-common"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-dhcp-agent"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-l3-agent"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-linuxbridge-agent"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-macvtap-agent"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-metadata-agent"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-metering-agent"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-openvswitch-agent"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-ovn-metadata-agent"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-plugin-ml2"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-server"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "neutron-sriov-agent"
        },
        {
            "binary_version": "2:16.4.2-0ubuntu6.2",
            "binary_name": "python3-neutron"
        }
    ]
}