{"id":"CVE-2017-7543","aliases":["GHSA-hvxr-2fvv-c3wq","PYSEC-2026-686"],"title":"OpenStack Neutron Race Condition vulnerability","summary":"OpenStack Neutron Race Condition vulnerability","severity":"medium","cvss":5.9,"cvssVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","vendor":"neutron","product":"neutron","ecosystem":"pip","affected":["neutron < 7.2.0-12.1","neutron >= 8.0.0, < 8.3.0-11.1","neutron >= 9.0.0, < 9.3.1-2.1","neutron >= 10.0.0, < 10.0.2-1.1"],"patched":["neutron 7.2.0-12.1","neutron 8.3.0-11.1","neutron 9.3.1-2.1","neutron 10.0.2-1.1"],"published":"2022-05-13","updated":"2026-09-10","sourceUpdated":"2026-09-10T03:49:33.795227363Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-hvxr-2fvv-c3wq","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7543"},{"url":"https://access.redhat.com/errata/RHSA-2017:2447"},{"url":"https://access.redhat.com/errata/RHSA-2017:2448"},{"url":"https://access.redhat.com/errata/RHSA-2017:2449"},{"url":"https://access.redhat.com/errata/RHSA-2017:2450"},{"url":"https://access.redhat.com/errata/RHSA-2017:2451"},{"url":"https://access.redhat.com/errata/RHSA-2017:2452"},{"url":"https://access.redhat.com/security/cve/CVE-2017-7543"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1473792"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7543"},{"url":"https://opendev.org/openstack/neutron"},{"url":"https://web.archive.org/web/20200227153412/https://www.securityfocus.com/bid/100237"}],"tags":["osv","pip"],"epss":0.01849,"epssPercentile":0.77847,"ingestedAt":"2026-07-08T18:25:50.324Z","slug":"CVE-2017-7543","body":"## Overview\n\nA race-condition flaw was discovered in openstack-neutron before 7.2.0-12.1, 8.x before 8.3.0-11.1, 9.x before 9.3.1-2.1, and 10.x before 10.0.2-1.1, where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0: net.bridge.bridge-nf-call-ip6tables and net.bridge.bridge-nf-call-iptables. The race was only triggered by an update, at which point an attacker could access exposed tenant VMs and network resources.\n\n## Affected packages\n\n- `neutron < 7.2.0-12.1`\n- `neutron >= 8.0.0, < 8.3.0-11.1`\n- `neutron >= 9.0.0, < 9.3.1-2.1`\n- `neutron >= 10.0.0, < 10.0.2-1.1`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `neutron 7.2.0-12.1`\n- `neutron 8.3.0-11.1`\n- `neutron 9.3.1-2.1`\n- `neutron 10.0.2-1.1`","depth":"sunlit","depthScore":33,"depthScoreParts":{"impact":32.5,"likelihood":0.4,"exploitation":0,"ransomware":0},"changes":[]}