Skip to content
Fencer Intel
medium 5.3

CVE-2017-7543 json

OpenStack Neutron Race Condition vulnerability

published 2018-07-26 8 y ago modified 2026-09-10 1 mo ago also GHSA-hvxr-2fvv-c3wq , PYSEC-2026-686 , EUVD-2022-4222

cvss
5.3
version 3.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
1.8%
EPSS 1.8% chance of exploitation in 30 days, percentile 79%
public exploits
0
none known

Summary

A race-condition flaw was discovered in openstack-neutron before 7.2.0-12.1, 8.x before 8.3.0-11.1, 9.x before 9.3.1-2.1, and 10.x before 10.0.2-1.1, where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0: net.bridge.bridge-nf-call-ip6tables and net.bridge.bridge-nf-call-iptables. The race was only triggered by an update, at which point an attacker could access exposed tenant VMs and network resources.

Patch / fix

  • pypi neutron 7.2.0-12.1, 8.3.0-11.1, 9.3.1-2.1, 10.0.2-1.1
  • openstack neutron 7.2.0-12.1, 8.3.0-11.1, 9.3.1-2.1, 10.0.2-1.1
  • openstack-neutron openstack 8 1:7.2.0-12.1.el7ost
  • python-neutron openstack 8 1:7.2.0-12.1.el7ost
  • python-neutron-tests openstack 8 1:7.2.0-12.1.el7ost
  • openstack-neutron-ml2 openstack 8 1:7.2.0-12.1.el7ost
  • openstack-neutron-cisco openstack 8 1:7.2.0-12.1.el7ost
  • openstack-neutron-nuage openstack 8 1:7.2.0-12.1.el7ost
  • openstack-neutron-common openstack 8 1:7.2.0-12.1.el7ost
  • openstack-neutron-brocade openstack 8 1:7.2.0-12.1.el7ost

red hat advisories RHSA-2017:2451RHSA-2017:2450RHSA-2017:2452RHSA-2017:2449RHSA-2017:2448RHSA-2017:2447

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2017-7543 updated cvss 5.3

openstack-neutron: iptables not active after update

  • Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7 python-neutron 2014.2.3-42.el7ost, openstack-neutron 2014.2.3-42.el7ost, openstack-neutron-ibm 2014.2.3-42.el7ost, openstack-neutron-ml2 2014.2.3-42.el7ost, openstack-neutron-nec 2014.2.3-42.el7ost, openstack-neutron-ryu 2014.2.3-42.el7ost, +20 more
    fixed: vendor fix RHSA-2017:2452
  • Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7 python-neutron 2015.1.4-16.1.el7ost, openstack-neutron 2015.1.4-16.1.el7ost, python-neutron-tests 2015.1.4-16.1.el7ost, openstack-neutron-ibm 2015.1.4-16.1.el7ost, openstack-neutron-ml2 2015.1.4-16.1.el7ost, openstack-neutron-nec 2015.1.4-16.1.el7ost, +19 more
    fixed: vendor fix RHSA-2017:2450
  • Red Hat OpenStack Platform 8.0 (Liberty) python-neutron 7.2.0-12.1.el7ost, openstack-neutron 7.2.0-12.1.el7ost, python-neutron-tests 7.2.0-12.1.el7ost, openstack-neutron-ml2 7.2.0-12.1.el7ost, openstack-neutron-cisco 7.2.0-12.1.el7ost, openstack-neutron-nuage 7.2.0-12.1.el7ost, +15 more
    fixed: vendor fix RHSA-2017:2451
  • Red Hat OpenStack Platform 9.0 python-neutron 8.3.0-11.1.el7ost, openstack-neutron 8.3.0-11.1.el7ost, python-neutron-tests 8.3.0-11.1.el7ost, openstack-neutron-ml2 8.3.0-11.1.el7ost, openstack-neutron-common 8.3.0-11.1.el7ost, openstack-neutron-rpc-server 8.3.0-11.1.el7ost, +6 more
    fixed: vendor fix RHSA-2017:2447
  • Red Hat OpenStack Platform 10.0 python-neutron 9.3.1-2.1.el7ost, openstack-neutron 9.3.1-2.1.el7ost, python-neutron-tests 9.3.1-2.1.el7ost, openstack-neutron-ml2 9.3.1-2.1.el7ost, openstack-neutron-common 9.3.1-2.1.el7ost, openstack-neutron-rpc-server 9.3.1-2.1.el7ost, +5 more
    fixed: vendor fix RHSA-2017:2448
  • Red Hat OpenStack Platform 11.0 python-neutron 10.0.2-1.1.el7ost, openstack-neutron 10.0.2-1.1.el7ost, python-neutron-tests 10.0.2-1.1.el7ost, openstack-neutron-ml2 10.0.2-1.1.el7ost, openstack-neutron-common 10.0.2-1.1.el7ost, openstack-neutron-rpc-server 10.0.2-1.1.el7ost, +5 more
    fixed: vendor fix RHSA-2017:2449
  • Red Hat OpenStack Platform 12 (Pike) python-neutron, openstack-neutron, python-neutron-tests, openstack-neutron-ml2, openstack-neutron-common, openstack-neutron-rpc-server, +5 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

1.84% chance of exploitation in the next 30 days, higher than 79% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
CNA 3.0 5.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
NVD 3.0 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD 2.0 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N
OSV 3.0 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
GitHub 3.0 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected packages

ecosystem package affected fixed in
pypi neutron
<7.2.0-12.1
>=8.0.0, <8.3.0-11.1
>=9.0.0, <9.3.1-2.1
>=10.0.0, <10.0.2-1.1
7.2.0-12.1
8.3.0-11.1
9.3.1-2.1
10.0.2-1.1

Affected products

  • Red Hat openstack-neutron

Classification

Weakness
  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.