PT-2019-1893 · Openstack+1 · Openstack Neutron+1

Erik Olof Gunnar Andersson · Published 2019-03-03 · Updated 2022-05-13 · CVE-2019-9735

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenStack Neutron versions prior to 10.0.8 OpenStack Neutron versions 11.x prior to 11.0.7 OpenStack Neutron versions 12.x prior to 12.0.6 OpenStack Neutron versions 13.x prior to 13.0.3

Description The issue is related to incorrect handling of security group settings in the iptables driver component of OpenStack Neutron's SDN platform. An attacker can exploit this to bypass defined security policy rules by blocking further application of security group rules for instances from any project on the affected hosts. This can be achieved by setting a destination port in a security group rule along with a protocol that does not support that option, such as VRRP.

Recommendations For OpenStack Neutron versions prior to 10.0.8, update to version 10.0.8 or later. For OpenStack Neutron versions 11.x prior to 11.0.7, update to version 11.0.7 or later. For OpenStack Neutron versions 12.x prior to 12.0.6, update to version 12.0.6 or later. For OpenStack Neutron versions 13.x prior to 13.0.3, update to version 13.0.3 or later. As a temporary workaround, consider restricting the use of the iptables security group driver until a patch is applied.

Exploit

Fix

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

CWE-254

Related Identifiers

BDU:2019-01547

CVE-2019-9735

DSA-4409-1

GHSA-9773-3FQG-8W25

PYSEC-2019-190

RHSA-2019:0879

RHSA-2019:0916

RHSA-2019:0935

SUSE-SU-2019:2219-1

SUSE-SU-2019:2267-1

USN-4036-1

Affected Products

Openstack Neutron

Ubuntu

References · 150

• 🔥 https://launchpad.net/bugs/1818385 · Exploit
• https://osv.dev/vulnerability/CVE-2019-9735 · Vendor Advisory
• https://usn.ubuntu.com/4036-1 · Vendor Advisory
• https://debian.org/security/2019/dsa-4409 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9735 · Security Note
• https://access.redhat.com/errata/RHSA-2019:0916 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4036-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2219-1 · Vendor Advisory
• https://security.openstack.org/ossa/OSSA-2019-001.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-4036-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/neutron · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:0935 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-9735 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2019:2267-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:0879 · Vendor Advisory