VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Jul 26, 2018· Updated Jun 17, 2026

CVE-2017-7543

CVE-2017-7543

Description

A race-condition flaw was discovered in openstack-neutron before 7.2.0-12.1, 8.x before 8.3.0-11.1, 9.x before 9.3.1-2.1, and 10.x before 10.0.2-1.1, where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0: net.bridge.bridge-nf-call-ip6tables and net.bridge.bridge-nf-call-iptables. The race was only triggered by an update, at which point an attacker could access exposed tenant VMs and network resources.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
neutronPyPI
< 7.2.0-12.17.2.0-12.1
neutronPyPI
>= 8.0.0, < 8.3.0-11.18.3.0-11.1
neutronPyPI
>= 9.0.0, < 9.3.1-2.19.3.1-2.1
neutronPyPI
>= 10.0.0, < 10.0.2-1.110.0.2-1.1

Affected products

9
  • OpenStack/Neutron
    cpe:2.3:a:openstack:neutron:*:*:*:*:*:*:*:*
    Range: >=7.0.0,<7.2.0-12.1
  • Red Hat/Openstack7 versions
    cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*
    • (no CPE)range: openstack-neutron-10.0.2-1.1
  • ghsa-coords
    pkg:pypi/neutron
    Range: < 7.2.0-12.1

Patches

Vulnerability mechanics

References

14

News mentions

0

No linked articles in our index yet.