{"action":"Upgrade neutron to 7.0.5 or later.","affected":[{"fixed":"7.0.5","introduced":"0"},{"fixed":"8.1.1","introduced":"8.0.0"}],"component":"neutron","cve_ids":["CVE-2016-5362"],"ecosystem":"PyPI","epss":0.03439,"exploited":false,"fixed_versions":["7.0.5","8.1.1"],"ghsa_id":"GHSA-qpwc-p365-pqrr","id":"tcs_01M5KFWFBPMW83DRKZ0KHS550B","modified_at":"2026-07-07T11:56:27.462889386Z","published_at":"2022-05-14T02:19:49Z","references":["https://osv.dev/vulnerability/GHSA-qpwc-p365-pqrr","https://nvd.nist.gov/vuln/detail/CVE-2016-5362","https://access.redhat.com/errata/RHSA-2016:1473","https://access.redhat.com/errata/RHSA-2016:1474","https://bugs.launchpad.net/neutron/+bug/1558658","https://github.com/openstack/neutron","https://review.openstack.org/#/c/300202","https://review.openstack.org/#/c/303563","https://review.openstack.org/#/c/303572","https://security.openstack.org/ossa/OSSA-2016-009.html","http://www.openwall.com/lists/oss-security/2016/06/10/5","http://www.openwall.com/lists/oss-security/2016/06/10/6"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-qpwc-p365-pqrr","url":"https://osv.dev/vulnerability/GHSA-qpwc-p365-pqrr"}],"summary":"OpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism"}