{"action":"Upgrade neutron to 16.4.1 or later.","affected":[{"fixed":"16.4.1","introduced":"0"},{"fixed":"17.1.3","introduced":"17.0.0"}],"component":"neutron","cve_ids":["CVE-2021-38598"],"ecosystem":"PyPI","epss":0.0122,"exploited":false,"fixed_versions":["16.4.1","17.1.3"],"ghsa_id":"GHSA-hvm4-mc7m-22w4","id":"tcs_01M5KFMF6705CWN5MS27A9EQDB","modified_at":"2024-10-03T21:33:12.369038Z","published_at":"2022-05-24T19:11:58Z","references":["https://osv.dev/vulnerability/GHSA-hvm4-mc7m-22w4","https://nvd.nist.gov/vuln/detail/CVE-2021-38598","https://github.com/openstack/neutron/commit/0a931391d8990f3e654b4bfda24ae4119c609bbf","https://github.com/openstack/neutron/commit/cc0d28a3e2ccfad6fc2ff24d78f009cbe3992575","https://github.com/openstack/neutron","https://github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2021-360.yaml","https://launchpad.net/bugs/1938670","https://opendev.org/openstack/neutron/commit/fafa5dacd5057120562184a734e7345e7c0e9639"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-hvm4-mc7m-22w4","url":"https://osv.dev/vulnerability/GHSA-hvm4-mc7m-22w4"}],"summary":"OpenStack Neutron vulnerable to hardware address impersonation"}