CVEvulnerability

CVE-2019-9735

6.5 MEDIUM Published 2019-03-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-03-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
Weaknesses
CWE-755

Description

An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.8, 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By setting a destination port in a security group rule along with a protocol that doesn't support that option (for example, VRRP), an authenticated user may block further application of security group rules for instances from any project/tenant on the compute hosts to which it's applied. (Only deployments using the iptables security group driver are affected.)

Affected configurations

• openstack neutron (< 10.0.8) • openstack neutron (>= 11.0.0 < 11.0.7) • openstack neutron (>= 12.0.0 < 12.0.6) • openstack neutron (>= 13.0.0 < 13.0.3) • redhat openstack 10 • redhat openstack 13 • redhat openstack 14 • debian debian linux 9.0

Related

Weakness · CWE (1)

  • CWE-755 Improper Handling of Exceptional Conditions weakness

References