CVE catalog
CVE-2019-17134
octavia: CVE-2019-17134
- Severity
- Medium · CVSS 6.7
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 2.32% · Oct 25, 2026
Amphora Images in OpenStack Octavia >=0.10.0 <2.1.2, >=3.0.0 <3.2.0, >=4.0.0 <4.1.0 allows anyone with access to the management network to bypass client-certificate based authentication and retrieve information or issue configuration commands via simple HTTP requests to the Agent on port https/9443, because the cmd/agent.py gunicorn cert_reqs option is True but is supposed to be ssl.CERT_REQUIRED.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | octavia | sid | 19.0.0-10 | fixed |
| Debian | octavia | forky | 19.0.0-10 | fixed |
| Debian | octavia | trixie | 16.0.0-2 | fixed |
| Debian | octavia | bookworm | 11.0.0-2 | fixed |
| Suse | ardana-db | openstack cloud 9 | 9.0+git.1572311426.a6dc2fd-3.13.1 | fixed |
| Suse | ardana-keystone | openstack cloud 9 | 9.0+git.1573069087.15ffd1c-3.13.1 | fixed |
| Suse | ardana-neutron | openstack cloud 9 | 9.0+git.1572019823.6650494-3.16.1 | fixed |
| Suse | ardana-nova | openstack cloud 9 | 9.0+git.1572618171.4460843-3.13.1 | fixed |
| Suse | openstack-barbican | openstack cloud 9 | 7.0.1~dev21-3.3.1 | fixed |
| Suse | openstack-heat-templates | openstack cloud 9 | 0.0.0+git.1553459627.948e8cc-3.3.1 | fixed |
| Suse | openstack-keystone | openstack cloud 9 | 14.1.1~dev28-3.16.1 | fixed |
| Suse | openstack-neutron | openstack cloud 9 | 13.0.6~dev8-3.16.2 | fixed |
| Suse | openstack-neutron-gbp | openstack cloud 9 | 5.0.1~dev476-3.13.1 | fixed |
| Suse | openstack-neutron-lbaas | openstack cloud 9 | 13.0.1~dev16-3.13.1 | fixed |
| Suse | openstack-nova | openstack cloud 9 | 18.2.4~dev22-3.16.2 | fixed |
| Suse | openstack-octavia | openstack cloud 9 | 3.2.1~dev3-3.16.1 | fixed |
| Suse | openstack-sahara | openstack cloud 9 | 9.0.2~dev14-3.6.1 | fixed |
| Suse | python-psutil | openstack cloud 9 | 5.4.6-3.3.1 | fixed |
| Suse | release-notes-suse-openstack-cloud | openstack cloud 9 | 9.20191025-3.15.1 | fixed |
| Suse | venv-openstack-barbican | openstack cloud 9 | 7.0.1~dev21-3.13.1 | fixed |
| Suse | venv-openstack-cinder | openstack cloud 9 | 13.0.8~dev8-3.13.1 | fixed |
| Suse | venv-openstack-designate | openstack cloud 9 | 7.0.1~dev22-3.13.1 | fixed |
| Suse | venv-openstack-heat | openstack cloud 9 | 11.0.3~dev23-3.13.1 | fixed |
| Suse | venv-openstack-keystone | openstack cloud 9 | 14.1.1~dev28-3.13.1 | fixed |
| Suse | venv-openstack-magnum | openstack cloud 9 | 7.1.1~dev28-4.13.1 | fixed |
| Suse | venv-openstack-manila | openstack cloud 9 | 7.3.1~dev15-3.13.1 | fixed |
| Suse | venv-openstack-monasca-ceilometer | openstack cloud 9 | 1.8.2~dev3-3.13.1 | fixed |
| Suse | venv-openstack-neutron | openstack cloud 9 | 13.0.6~dev8-6.13.1 | fixed |
| Suse | venv-openstack-nova | openstack cloud 9 | 18.2.4~dev22-3.13.1 | fixed |
| Suse | venv-openstack-octavia | openstack cloud 9 | 3.2.1~dev3-4.13.1 | fixed |
| Suse | venv-openstack-sahara | openstack cloud 9 | 9.0.2~dev14-3.13.1 | fixed |
| Suse | crowbar-core | openstack cloud crowbar 9 | 6.0+git.1573825081.b1caf60f1-3.16.1 | fixed |
| Suse | crowbar-openstack | openstack cloud crowbar 9 | 6.0+git.1573754820.dd036ef77-3.16.1 | fixed |
| Suse | crowbar-ui | openstack cloud crowbar 9 | 1.3.0+git.1572871359.50fc6087-14.1 | fixed |
| Suse | openstack-barbican | openstack cloud crowbar 9 | 7.0.1~dev21-3.3.1 | fixed |
| Suse | openstack-heat-templates | openstack cloud crowbar 9 | 0.0.0+git.1553459627.948e8cc-3.3.1 | fixed |
| Suse | openstack-keystone | openstack cloud crowbar 9 | 14.1.1~dev28-3.16.1 | fixed |
| Suse | openstack-neutron | openstack cloud crowbar 9 | 13.0.6~dev8-3.16.2 | fixed |
| Suse | openstack-neutron-gbp | openstack cloud crowbar 9 | 5.0.1~dev476-3.13.1 | fixed |
| Suse | openstack-neutron-lbaas | openstack cloud crowbar 9 | 13.0.1~dev16-3.13.1 | fixed |
| Suse | openstack-nova | openstack cloud crowbar 9 | 18.2.4~dev22-3.16.2 | fixed |
| Suse | openstack-octavia | openstack cloud crowbar 9 | 3.2.1~dev3-3.16.1 | fixed |
| Suse | openstack-sahara | openstack cloud crowbar 9 | 9.0.2~dev14-3.6.1 | fixed |
| Suse | python-psutil | openstack cloud crowbar 9 | 5.4.6-3.3.1 | fixed |
| Suse | release-notes-suse-openstack-cloud | openstack cloud crowbar 9 | 9.20191025-3.15.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | octavia | source | sid | 4.0.0-6 | not yet assigned | Not reported | [941897] |
| Debian | octavia | source | forky | 4.0.0-6 | not yet assigned | Not reported | [941897] |
| Debian | octavia | source | trixie | 4.0.0-6 | not yet assigned | Not reported | [941897] |
| Debian | octavia | source | bookworm | 4.0.0-6 | not yet assigned | Not reported | [941897] |
| Suse | ardana-db | rpm | openstack cloud 9 | 9.0+git.1572311426.a6dc2fd-3.13.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | ardana-keystone | rpm | openstack cloud 9 | 9.0+git.1573069087.15ffd1c-3.13.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | ardana-neutron | rpm | openstack cloud 9 | 9.0+git.1572019823.6650494-3.16.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | ardana-nova | rpm | openstack cloud 9 | 9.0+git.1572618171.4460843-3.13.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | openstack-barbican | rpm | openstack cloud 9 | 7.0.1~dev21-3.3.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | openstack-heat-templates | rpm | openstack cloud 9 | 0.0.0+git.1553459627.948e8cc-3.3.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | openstack-keystone | rpm | openstack cloud 9 | 14.1.1~dev28-3.16.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | openstack-neutron | rpm | openstack cloud 9 | 13.0.6~dev8-3.16.2 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | openstack-neutron-gbp | rpm | openstack cloud 9 | 5.0.1~dev476-3.13.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | openstack-neutron-lbaas | rpm | openstack cloud 9 | 13.0.1~dev16-3.13.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | openstack-nova | rpm | openstack cloud 9 | 18.2.4~dev22-3.16.2 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | openstack-octavia | rpm | openstack cloud 9 | 3.2.1~dev3-3.16.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | openstack-sahara | rpm | openstack cloud 9 | 9.0.2~dev14-3.6.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | python-psutil | rpm | openstack cloud 9 | 5.4.6-3.3.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | release-notes-suse-openstack-cloud | rpm | openstack cloud 9 | 9.20191025-3.15.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | venv-openstack-barbican | rpm | openstack cloud 9 | 7.0.1~dev21-3.13.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | venv-openstack-cinder | rpm | openstack cloud 9 | 13.0.8~dev8-3.13.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | venv-openstack-designate | rpm | openstack cloud 9 | 7.0.1~dev22-3.13.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | venv-openstack-heat | rpm | openstack cloud 9 | 11.0.3~dev23-3.13.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | venv-openstack-keystone | rpm | openstack cloud 9 | 14.1.1~dev28-3.13.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | venv-openstack-magnum | rpm | openstack cloud 9 | 7.1.1~dev28-4.13.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | venv-openstack-manila | rpm | openstack cloud 9 | 7.3.1~dev15-3.13.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | venv-openstack-monasca-ceilometer | rpm | openstack cloud 9 | 1.8.2~dev3-3.13.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | venv-openstack-neutron | rpm | openstack cloud 9 | 13.0.6~dev8-6.13.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | venv-openstack-nova | rpm | openstack cloud 9 | 18.2.4~dev22-3.13.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | venv-openstack-octavia | rpm | openstack cloud 9 | 3.2.1~dev3-4.13.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | venv-openstack-sahara | rpm | openstack cloud 9 | 9.0.2~dev14-3.13.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | crowbar-core | rpm | openstack cloud crowbar 9 | 6.0+git.1573825081.b1caf60f1-3.16.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | crowbar-openstack | rpm | openstack cloud crowbar 9 | 6.0+git.1573754820.dd036ef77-3.16.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | crowbar-ui | rpm | openstack cloud crowbar 9 | 1.3.0+git.1572871359.50fc6087-14.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | openstack-barbican | rpm | openstack cloud crowbar 9 | 7.0.1~dev21-3.3.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | openstack-heat-templates | rpm | openstack cloud crowbar 9 | 0.0.0+git.1553459627.948e8cc-3.3.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | openstack-keystone | rpm | openstack cloud crowbar 9 | 14.1.1~dev28-3.16.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | openstack-neutron | rpm | openstack cloud crowbar 9 | 13.0.6~dev8-3.16.2 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | openstack-neutron-gbp | rpm | openstack cloud crowbar 9 | 5.0.1~dev476-3.13.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | openstack-neutron-lbaas | rpm | openstack cloud crowbar 9 | 13.0.1~dev16-3.13.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | openstack-nova | rpm | openstack cloud crowbar 9 | 18.2.4~dev22-3.16.2 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | openstack-octavia | rpm | openstack cloud crowbar 9 | 3.2.1~dev3-3.16.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | openstack-sahara | rpm | openstack cloud crowbar 9 | 9.0.2~dev14-3.6.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | python-psutil | rpm | openstack cloud crowbar 9 | 5.4.6-3.3.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
| Suse | release-notes-suse-openstack-cloud | rpm | openstack cloud crowbar 9 | 9.20191025-3.15.1 | Not reported | SUSE-SU-2019:3068-1 | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [octavia-agent]Fixed
Source package: [octavia]
Details (2)
11.0.0-2· all · bookwormFixed · Fixed:
4.0.0-6dsa · octavia · debian · bookworm; dsa · octavia · debian · 12
11.0.0-2· all · bookwormFixed · Fixed:
4.0.0-6dsa · octavia · debian · bookworm; dsa · octavia · debian · 12
- [octavia-api]Fixed
Source package: [octavia]
Details (2)
11.0.0-2· all · bookwormFixed · Fixed:
4.0.0-6dsa · octavia · debian · bookworm; dsa · octavia · debian · 12
11.0.0-2· all · bookwormFixed · Fixed:
4.0.0-6dsa · octavia · debian · bookworm; dsa · octavia · debian · 12
- [octavia-common]Fixed
Source package: [octavia]
Details (2)
11.0.0-2· all · bookwormFixed · Fixed:
4.0.0-6dsa · octavia · debian · bookworm; dsa · octavia · debian · 12
11.0.0-2· all · bookwormFixed · Fixed:
4.0.0-6dsa · octavia · debian · bookworm; dsa · octavia · debian · 12
- [octavia-doc]Fixed
Source package: [octavia]
Details (2)
11.0.0-2· all · bookwormFixed · Fixed:
4.0.0-6dsa · octavia · debian · bookworm; dsa · octavia · debian · 12
11.0.0-2· all · bookwormFixed · Fixed:
4.0.0-6dsa · octavia · debian · bookworm; dsa · octavia · debian · 12
- [octavia-driver-agent]Fixed
Source package: [octavia]
Details (2)
11.0.0-2· all · bookwormFixed · Fixed:
4.0.0-6dsa · octavia · debian · bookworm; dsa · octavia · debian · 12
11.0.0-2· all · bookwormFixed · Fixed:
4.0.0-6dsa · octavia · debian · bookworm; dsa · octavia · debian · 12
- [octavia-health-manager]Fixed
Source package: [octavia]
Details (2)
11.0.0-2· all · bookwormFixed · Fixed:
4.0.0-6dsa · octavia · debian · bookworm; dsa · octavia · debian · 12
11.0.0-2· all · bookwormFixed · Fixed:
4.0.0-6dsa · octavia · debian · bookworm; dsa · octavia · debian · 12
- [octavia-housekeeping]Fixed
Source package: [octavia]
Details (2)
11.0.0-2· all · bookwormFixed · Fixed:
4.0.0-6dsa · octavia · debian · bookworm; dsa · octavia · debian · 12
11.0.0-2· all · bookwormFixed · Fixed:
4.0.0-6dsa · octavia · debian · bookworm; dsa · octavia · debian · 12
- [octavia-worker]Fixed
Source package: [octavia]
Details (2)
11.0.0-2· all · bookwormFixed · Fixed:
4.0.0-6dsa · octavia · debian · bookworm; dsa · octavia · debian · 12
11.0.0-2· all · bookwormFixed · Fixed:
4.0.0-6dsa · octavia · debian · bookworm; dsa · octavia · debian · 12
- [python3-octavia]Fixed
Source package: [octavia]
Details (2)
11.0.0-2· all · bookwormFixed · Fixed:
4.0.0-6dsa · octavia · debian · bookworm; dsa · octavia · debian · 12
11.0.0-2· all · bookwormFixed · Fixed:
4.0.0-6dsa · octavia · debian · bookworm; dsa · octavia · debian · 12
[Debian 13 (Trixie)]
- [octavia-agent]Fixed
Source package: [octavia]
Details (2)
16.0.0-2· all · trixieFixed · Fixed:
4.0.0-6dsa · octavia · debian · 13
16.0.0-2· all · trixieFixed · Fixed:
4.0.0-6dsa · octavia · debian · 13
- [octavia-api]Fixed
Source package: [octavia]
Details (2)
16.0.0-2· all · trixieFixed · Fixed:
4.0.0-6dsa · octavia · debian · 13
16.0.0-2· all · trixieFixed · Fixed:
4.0.0-6dsa · octavia · debian · 13
- [octavia-common]Fixed
Source package: [octavia]
Details (2)
16.0.0-2· all · trixieFixed · Fixed:
4.0.0-6dsa · octavia · debian · 13
16.0.0-2· all · trixieFixed · Fixed:
4.0.0-6dsa · octavia · debian · 13
- [octavia-doc]Fixed
Source package: [octavia]
Details (2)
16.0.0-2· all · trixieFixed · Fixed:
4.0.0-6dsa · octavia · debian · 13
16.0.0-2· all · trixieFixed · Fixed:
4.0.0-6dsa · octavia · debian · 13
- [octavia-driver-agent]Fixed
Source package: [octavia]
Details (2)
16.0.0-2· all · trixieFixed · Fixed:
4.0.0-6dsa · octavia · debian · 13
16.0.0-2· all · trixieFixed · Fixed:
4.0.0-6dsa · octavia · debian · 13
- [octavia-health-manager]Fixed
Source package: [octavia]
Details (2)
16.0.0-2· all · trixieFixed · Fixed:
4.0.0-6dsa · octavia · debian · 13
16.0.0-2· all · trixieFixed · Fixed:
4.0.0-6dsa · octavia · debian · 13
- [octavia-housekeeping]Fixed
Source package: [octavia]
Details (2)
16.0.0-2· all · trixieFixed · Fixed:
4.0.0-6dsa · octavia · debian · 13
16.0.0-2· all · trixieFixed · Fixed:
4.0.0-6dsa · octavia · debian · 13
- [octavia-worker]Fixed
Source package: [octavia]
Details (2)
16.0.0-2· all · trixieFixed · Fixed:
4.0.0-6dsa · octavia · debian · 13
16.0.0-2· all · trixieFixed · Fixed:
4.0.0-6dsa · octavia · debian · 13
- [python3-octavia]Fixed
Source package: [octavia]
Details (2)
16.0.0-2· all · trixieFixed · Fixed:
4.0.0-6dsa · octavia · debian · 13
16.0.0-2· all · trixieFixed · Fixed:
4.0.0-6dsa · octavia · debian · 13
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_3068-1.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2019-17134]
- [https://osv.dev/vulnerability/SUSE-SU-2019:3068-1]
- [https://security-tracker.debian.org/tracker/CVE-2019-17134]
- [https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-17134.json]
[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]