From 8a893feb35797c9470816dbdecba758136748bec Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Fri, 23 Feb 2024 21:29:59 +0000
Subject: [PATCH] Publish GHSA-w8hx-f868-pvch

---
 .../GHSA-w8hx-f868-pvch.json                  | 69 +++++++++++++++++--
 1 file changed, 65 insertions(+), 4 deletions(-)
 rename advisories/{unreviewed => github-reviewed}/2022/05/GHSA-w8hx-f868-pvch/GHSA-w8hx-f868-pvch.json (51%)

diff --git a/advisories/unreviewed/2022/05/GHSA-w8hx-f868-pvch/GHSA-w8hx-f868-pvch.json b/advisories/github-reviewed/2022/05/GHSA-w8hx-f868-pvch/GHSA-w8hx-f868-pvch.json
similarity index 51%
rename from advisories/unreviewed/2022/05/GHSA-w8hx-f868-pvch/GHSA-w8hx-f868-pvch.json
rename to advisories/github-reviewed/2022/05/GHSA-w8hx-f868-pvch/GHSA-w8hx-f868-pvch.json
index c1edf61d2c9..76a983bbc01 100644
--- a/advisories/unreviewed/2022/05/GHSA-w8hx-f868-pvch/GHSA-w8hx-f868-pvch.json
+++ b/advisories/github-reviewed/2022/05/GHSA-w8hx-f868-pvch/GHSA-w8hx-f868-pvch.json
@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-w8hx-f868-pvch",
-  "modified": "2022-10-07T18:16:02Z",
+  "modified": "2024-02-23T21:28:06Z",
   "published": "2022-05-24T19:03:37Z",
   "aliases": [
     "CVE-2021-20267"
   ],
+  "summary": "Openstack Neutron has Insufficient Verification of IPv6 addresses",
   "details": "A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the IPv6 addresses of other systems on the network, resulting in denial of service or in some cases possibly interception of traffic intended for other destinations. Only deployments using the Open vSwitch driver are affected. Source: OpenStack project. Versions before openstack-neutron 15.3.3, openstack-neutron 16.3.1 and openstack-neutron 17.1.1 are affected.",
   "severity": [
     {
@@ -14,7 +15,63 @@
     }
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "neutron"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "16.0.0"
+            },
+            {
+              "fixed": "16.3.1"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "neutron"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "15.3.3"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "neutron"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "17.0.0"
+            },
+            {
+              "fixed": "17.1.1"
+            }
+          ]
+        }
+      ]
+    }
   ],
   "references": [
     {
@@ -25,6 +82,10 @@
       "type": "WEB",
       "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1934330"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/openstack/neutron"
+    },
     {
       "type": "WEB",
       "url": "https://security.openstack.org/ossa/OSSA-2021-001.html"
@@ -35,8 +96,8 @@
       "CWE-345"
     ],
     "severity": "HIGH",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-02-23T21:28:05Z",
     "nvd_published_at": "2021-05-28T19:15:00Z"
   }
 }
\ No newline at end of file