VYPR
← All advisories
High severityOSV Advisory· Published Mar 13, 2019· Updated Aug 4, 2024

CVE-2019-9735

CVE-2019-9735

Description

An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.8, 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By setting a destination port in a security group rule along with a protocol that doesn't support that option (for example, VRRP), an authenticated user may block further application of security group rules for instances from any project/tenant on the compute hosts to which it's applied. (Only deployments using the iptables security group driver are affected.)

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
neutronPyPI
< 10.0.810.0.8
neutronPyPI
>= 11.0.0, < 11.0.711.0.7
neutronPyPI
>= 12.0.0, < 12.0.612.0.6
neutronPyPI
>= 13.0.0, < 13.0.313.0.3

Affected products

265

Patches

Vulnerability mechanics

References

15

News mentions

0

No linked articles in our index yet.