oss-sec mailing list archives
Re: [OSSA-2021-004] Neutron: Linuxbridge ARP filter bypass on Netfilter platforms (CVE-2021-38598)
From: Jan Engelhardt <jengelh () inai de>
Date: Tue, 17 Aug 2021 19:30:21 +0200 (CEST)
On Tuesday 2021-08-17 17:17, Jeremy Stanley wrote:
Description ~~~~~~~~~~~ Jake Yip with ARDC and Justin Mammarella with the University of Melbourne reported a vulnerability in Neutron's linuxbridge driver on newer Netfilter-based platforms (the successor to IPTables).
ip_tables is running atop the netfilter API, so.... it's not an ordered set with predecessors and successors.
Current thread:
- [OSSA-2021-004] Neutron: Linuxbridge ARP filter bypass on Netfilter platforms (CVE-2021-38598) Jeremy Stanley (Aug 17)
- Re: [OSSA-2021-004] Neutron: Linuxbridge ARP filter bypass on Netfilter platforms (CVE-2021-38598) Jan Engelhardt (Aug 17)