6.5

CVE-2019-10876

An issue was discovered in OpenStack Neutron 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By creating two security groups with separate/overlapping port ranges, an authenticated user may prevent Neutron from being able to configure networks on any compute nodes where those security groups are present, because of an Open vSwitch (OVS) firewall KeyError. All Neutron deployments utilizing neutron-openvswitch-agent are affected.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Openstack ≫ Neutron Version >= 11.0.0 < 11.0.7
Openstack ≫ Neutron Version >= 12.0.0 < 12.0.6
Openstack ≫ Neutron Version >= 13.0.0 < 13.0.3
Redhat ≫ Openstack Version13
Redhat ≫ Openstack Version14
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.9% 0.746
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
https://bugs.launchpad.net/ossa/+bug/1813007
Third Party Advisory
Issue Tracking