VYPR
← All advisories
High severityOSV Advisory· Published Apr 5, 2019· Updated Aug 4, 2024

CVE-2019-10876

CVE-2019-10876

Description

An issue was discovered in OpenStack Neutron 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By creating two security groups with separate/overlapping port ranges, an authenticated user may prevent Neutron from being able to configure networks on any compute nodes where those security groups are present, because of an Open vSwitch (OVS) firewall KeyError. All Neutron deployments utilizing neutron-openvswitch-agent are affected.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
neutronPyPI
>= 11.0.0, < 11.0.711.0.7
neutronPyPI
>= 12.0.0, < 12.0.612.0.6
neutronPyPI
>= 13.0.0, < 13.0.313.0.3

Affected products

483

Patches

Vulnerability mechanics

References

9

News mentions

0

No linked articles in our index yet.