Comment 4 for bug 1563753

Revision history for this message
Adam Heczko (aheczko-mirantis) wrote :

IMO one could disable Neutron port security mechanism and inject MPLS packets.
https://specs.openstack.org/openstack/neutron-specs/specs/kilo/ml2-ovs-portsecurity.html
Of course MOS is vulnerable, the vulnerability is there but the attack vector is limited.