CVE-2021-20267

A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the IPv6 addresses of other systems on the network, resulting in denial of service or in some cases possibly interception of traffic intended for other destinations. Only deployments using the Open vSwitch driver are affected. Source: OpenStack project. Versions before openstack-neutron 15.3.3, openstack-neutron 16.3.1 and openstack-neutron 17.1.1 are affected.

• CWE-345

• https://bugzilla.redhat.com/show_bug.cgi?id=1934330Issue Tracking, Patch, Third Party Advisory
• https://security.openstack.org/ossa/OSSA-2021-001.htmlPatch, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1934330Issue Tracking, Patch, Third Party Advisory
• https://security.openstack.org/ossa/OSSA-2021-001.htmlPatch, Vendor Advisory

Published

May 28, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-20261A race condition was found in the Linux kernels implementati…6.4
• CVE-2021-20262A flaw was found in Keycloak 12.0.0 where re-authentication …6.8
• CVE-2021-20263A flaw was found in the virtio-fs shared file system daemon …3.3
• CVE-2021-20264An insecure modification flaw in the /etc/passwd file was fo…7.8
• CVE-2021-20265A flaw was found in the way memory resources were freed in t…5.5
• CVE-2021-20266A flaw was found in RPM's hdrblobInit() in lib/header.c. Thi…4.9
• CVE-2021-20268An out-of-bounds access flaw was found in the Linux kernel's…7.8
• CVE-2021-20269A flaw was found in the permissions of a log file created by…5.5
• CVE-2021-2027Vulnerability in the Oracle Marketing product of Oracle E-Bu…8.2
• CVE-2021-20270An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7…7.5
• CVE-2021-20271A flaw was found in RPM's signature check functionality when…7
• CVE-2021-20272A flaw was found in privoxy before 3.0.32. An assertion fail…7.5