Vulnetix
Try Vulnetix Request Demo
CVE-2019-9735 PUBLISHED

An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.8, 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By setting a destination port in a security group rule along with a protocol that doesn't support that option (for example, VRRP), an authenticated user may block further application of security group rules for instances from any project/tenant on the compute hosts to which it's applied. (Only deployments using the iptables security group driver are affected.)

EPSS 1.89% · 83.1th percentile

Risk Scores

EPSS Score
1.89%
83.1th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSneutron0, 2:11.0.1-0ubuntu1, 2:12.0.0~b1-0ubuntu1
Ubuntu:16.04:LTSneutron2:8.4.0-0ubuntu7.2, 0, 2:8.4.0-0ubuntu7.3

Timeline

References

Open in Interactive Console →