CVE catalog

CVE-2019-9735

neutron: CVE-2019-9735

[CVE catalog]

Severity
High · CVSS 7.7CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
3.71% · Oct 25, 2026

An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.8, 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By setting a destination port in a security group rule along with a protocol that doesn't support that option (for example, VRRP), an authenticated user may block further application of security group rules for instances from any project/tenant on the compute hosts to which it's applied. (Only deployments using the iptables security group driver are affected.)

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianneutronsid2:29.0.0-9fixed
Debianneutronforky2:28.0.1-2fixed
Debianneutrontrixie2:26.0.3-0+deb13u3fixed
Debianneutrontrixie-security2:26.0.3-0+deb13u3fixed
Debianneutronbookworm2:21.0.0-7fixed
Debianneutronbookworm-security2:21.0.0-7+deb12u1fixed
Ubuntuneutron16.042:7.0.0-0ubuntu1vulnerable
Ubuntuneutron16.042:8.0.0~b1-0ubuntu2vulnerable
Ubuntuneutron16.042:8.0.0~b2-0ubuntu4vulnerable
Ubuntuneutron16.042:8.0.0~b2-0ubuntu5vulnerable
Ubuntuneutron16.042:8.0.0~b2-0ubuntu7vulnerable
Ubuntuneutron16.042:8.0.0~b3-0ubuntu1vulnerable
Ubuntuneutron16.042:8.0.0~rc1-0ubuntu1vulnerable
Ubuntuneutron16.042:8.0.0-0ubuntu1vulnerable
Ubuntuneutron16.042:8.1.0-0ubuntu0.16.04.2vulnerable
Ubuntuneutron16.042:8.1.2-0ubuntu1vulnerable
Ubuntuneutron16.042:8.2.0-0ubuntu1vulnerable
Ubuntuneutron16.042:8.3.0-0ubuntu1vulnerable
Ubuntuneutron16.042:8.3.0-0ubuntu1.1vulnerable
Ubuntuneutron16.042:8.3.0-0ubuntu1.2vulnerable
Ubuntuneutron16.042:8.4.0-0ubuntu1vulnerable
Ubuntuneutron16.042:8.4.0-0ubuntu2vulnerable
Ubuntuneutron16.042:8.4.0-0ubuntu3vulnerable
Ubuntuneutron16.042:8.4.0-0ubuntu4vulnerable
Ubuntuneutron16.042:8.4.0-0ubuntu5vulnerable
Ubuntuneutron16.042:8.4.0-0ubuntu6vulnerable
Ubuntuneutron16.042:8.4.0-0ubuntu7.1vulnerable
Ubuntuneutron16.042:8.4.0-0ubuntu7.2vulnerable
Ubuntuneutron16.042:8.4.0-0ubuntu7.3vulnerable
Ubuntuneutron16.042:8.4.0-0ubuntu7.4fixed
Ubuntuneutron16.042:7.0.0-0ubuntu1vulnerable
Ubuntuneutron16.042:8.0.0~b1-0ubuntu2vulnerable
Ubuntuneutron16.042:8.0.0~b2-0ubuntu4vulnerable
Ubuntuneutron16.042:8.0.0~b2-0ubuntu5vulnerable
Ubuntuneutron16.042:8.0.0~b2-0ubuntu7vulnerable
Ubuntuneutron16.042:8.0.0~b3-0ubuntu1vulnerable
Ubuntuneutron16.042:8.0.0~rc1-0ubuntu1vulnerable
Ubuntuneutron16.042:8.0.0-0ubuntu1vulnerable
Ubuntuneutron16.042:8.1.0-0ubuntu0.16.04.2vulnerable
Ubuntuneutron16.042:8.1.2-0ubuntu1vulnerable
Ubuntuneutron16.042:8.2.0-0ubuntu1vulnerable
Ubuntuneutron16.042:8.3.0-0ubuntu1vulnerable
Ubuntuneutron16.042:8.3.0-0ubuntu1.1vulnerable
Ubuntuneutron16.042:8.3.0-0ubuntu1.2vulnerable
Ubuntuneutron16.042:8.4.0-0ubuntu1vulnerable
Ubuntuneutron16.042:8.4.0-0ubuntu2vulnerable
Ubuntuneutron16.042:8.4.0-0ubuntu3vulnerable
Ubuntuneutron16.042:8.4.0-0ubuntu4vulnerable
Ubuntuneutron16.042:8.4.0-0ubuntu5vulnerable
Ubuntuneutron16.042:8.4.0-0ubuntu6vulnerable
Ubuntuneutron16.042:8.4.0-0ubuntu7.1vulnerable
Ubuntuneutron16.042:8.4.0-0ubuntu7.2vulnerable
Ubuntuneutron16.042:8.4.0-0ubuntu7.3vulnerable
Ubuntuneutron16.042:8.4.0-0ubuntu7.4fixed
Ubuntuneutron18.042:11.0.1-0ubuntu1vulnerable
Ubuntuneutron18.042:12.0.0~b1-0ubuntu1vulnerable
Ubuntuneutron18.042:12.0.0~b1-0ubuntu2vulnerable
Ubuntuneutron18.042:12.0.0~b2-0ubuntu1vulnerable
Ubuntuneutron18.042:12.0.0~b3-0ubuntu1vulnerable
Ubuntuneutron18.042:12.0.0~rc1-0ubuntu1vulnerable
Ubuntuneutron18.042:12.0.0~rc2-0ubuntu1vulnerable
Ubuntuneutron18.042:12.0.0-0ubuntu1vulnerable
Ubuntuneutron18.042:12.0.0-0ubuntu1.1vulnerable
Ubuntuneutron18.042:12.0.0-0ubuntu1.2vulnerable
Ubuntuneutron18.042:12.0.0-0ubuntu1.3vulnerable
Ubuntuneutron18.042:12.0.0-0ubuntu1.4vulnerable
Ubuntuneutron18.042:12.0.0-0ubuntu2vulnerable
Ubuntuneutron18.042:12.0.0-0ubuntu3vulnerable
Ubuntuneutron18.042:12.0.1-0ubuntu1vulnerable
Ubuntuneutron18.042:12.0.1-0ubuntu1.1vulnerable
Ubuntuneutron18.042:12.0.2-0ubuntu1vulnerable
Ubuntuneutron18.042:12.0.3-0ubuntu1vulnerable
Ubuntuneutron18.042:12.0.5-0ubuntu1vulnerable
Ubuntuneutron18.042:12.0.5-0ubuntu4vulnerable
Ubuntuneutron18.042:12.0.5-0ubuntu5vulnerable
Ubuntuneutron18.042:12.0.6-0ubuntu1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianneutronsourcesid2:13.0.2-13not yet assignedNot reported[924508]
Debianneutronsourceforky2:13.0.2-13not yet assignedNot reported[924508]
Debianneutronsourcetrixie2:13.0.2-13not yet assignedNot reported[924508]
Debianneutronsourcebookworm2:13.0.2-13not yet assignedNot reported[924508]
Ubuntuneutrondeb16.042:8.4.0-0ubuntu7.4Not reportedUSN-4036-1Not reported
Ubuntuneutrondeb16.042:8.4.0-0ubuntu7.4Not reportedUBUNTU-CVE-2019-9735Not reported
Ubuntuneutrondeb18.042:12.0.6-0ubuntu1Not reportedUBUNTU-CVE-2019-9735Not reported

[Debian bug #924508]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [neutron-api]Unknown

    Source package: [neutron]

    Details (4)
    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

  • Source package: [neutron]

    Details (4)
    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

  • Source package: [neutron]

    Details (4)
    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

  • [neutron-doc]Unknown

    Source package: [neutron]

    Details (4)
    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

  • Source package: [neutron]

    Details (4)
    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

  • Source package: [neutron]

    Details (4)
    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

  • Source package: [neutron]

    Details (4)
    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

  • Source package: [neutron]

    Details (4)
    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

  • Source package: [neutron]

    Details (4)
    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

  • Source package: [neutron]

    Details (4)
    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

  • Source package: [neutron]

    Details (4)
    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

  • Source package: [neutron]

    Details (4)
    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

  • Source package: [neutron]

    Details (4)
    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

  • Source package: [neutron]

    Details (4)
    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

  • Source package: [neutron]

    Details (4)
    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

  • Source package: [neutron]

    Details (4)
    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7 · all · bookworm

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

    • 2:21.0.0-7+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · bookworm; dsa · neutron · debian · 12

[Debian 13 (Trixie)]

  • [neutron-api]Unknown

    Source package: [neutron]

    Details (5)
    • 2:26.0.3-0+deb13u2 · all · trixie

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · 13

    • 2:26.0.3-0+deb13u2 · all · trixie

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · 13

    • 2:26.0.3-0+deb13u2 · all · trixie-security · Historical version

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · 13

    • 2:26.0.3-0+deb13u3 · all · trixie-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · 13

    • 2:26.0.3-0+deb13u3 · all · trixie-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · 13

  • Source package: [neutron]

    Details (5)
    • 2:26.0.3-0+deb13u2 · all · trixie

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · 13

    • 2:26.0.3-0+deb13u2 · all · trixie

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · 13

    • 2:26.0.3-0+deb13u2 · all · trixie-security · Historical version

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · 13

    • 2:26.0.3-0+deb13u3 · all · trixie-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · 13

    • 2:26.0.3-0+deb13u3 · all · trixie-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · 13

  • Source package: [neutron]

    Details (5)
    • 2:26.0.3-0+deb13u2 · all · trixie

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · 13

    • 2:26.0.3-0+deb13u2 · all · trixie

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · 13

    • 2:26.0.3-0+deb13u2 · all · trixie-security · Historical version

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · 13

    • 2:26.0.3-0+deb13u3 · all · trixie-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · 13

    • 2:26.0.3-0+deb13u3 · all · trixie-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · 13

  • [neutron-doc]Unknown

    Source package: [neutron]

    Details (5)
    • 2:26.0.3-0+deb13u2 · all · trixie

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · 13

    • 2:26.0.3-0+deb13u2 · all · trixie

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · 13

    • 2:26.0.3-0+deb13u2 · all · trixie-security · Historical version

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · 13

    • 2:26.0.3-0+deb13u3 · all · trixie-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · 13

    • 2:26.0.3-0+deb13u3 · all · trixie-security

      Fixed · Fixed: 2:13.0.2-13

      dsa · neutron · debian · 13

Next results

Observed:

References