Skip to content
OpenAdvisories
Medium USN-4036-1 1 CVE

neutron vulnerability

Published Jun 25, 2019 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Erik Olof Gunnar Andersson discovered that OpenStack Neutron incorrectly
handled certain security group rules in the iptables firewall module. An
authenticated attacker could possibly use this issue to block further
application of security group rules for other instances.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS neutron 2:8.4.0-0ubuntu7.4

Vulnerabilities 1

  • Medium 6.5
    CVE-2019-9735

    OpenStack Neutron's unsupported dport option prevents applying security groups

    An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.8, 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By setting a destination port in a security group rule along with a protocol that doesn't support that …

    neutron neutron neutron Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2019-9735