OpenStack Neutron CVE-2019-9735 Denial of Service Vulnerability

Bugtraq ID:	107390
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2019-9735
Remote:	Yes
Local:	No
Published:	Mar 03 2019 12:00AM
Updated:	Mar 03 2019 12:00AM
Credit:	Erik Olof Gunnar Andersson
Vulnerable:	OpenStack neutron 13.0.2 OpenStack neutron 12.0.5 OpenStack neutron 11.0.6 OpenStack neutron 10.0.7 OpenStack neutron 10.0 OpenStack neutron 9.0 OpenStack neutron 7.0 OpenStack neutron 6.0 OpenStack neutron 5.0 OpenStack neutron 4.0 OpenStack neutron 3.0 OpenStack neutron 2.0 OpenStack neutron 1.0 OpenStack neutron 8.1.0 OpenStack neutron 8.0.0 OpenStack neutron 7.0.4 OpenStack neutron 13.0 OpenStack neutron 12.0 OpenStack neutron 11.0
Not Vulnerable:	OpenStack neutron 13.0.3 OpenStack neutron 12.0.6 OpenStack neutron 11.0.7 OpenStack neutron 10.0.8

OpenStack Neutron CVE-2019-9735 Denial of Service Vulnerability

OpenStack Neutron is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to cause denial-of-service conditions.

Neutron prior to 10.0.8, 11.x prior to 11.0.7, 12.x prior to 12.0.6, and 13.x prior to 13.0.3 are vulnerable.

OpenStack Neutron CVE-2019-9735 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

OpenStack Neutron CVE-2019-9735 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

OpenStack Neutron CVE-2019-9735 Denial of Service Vulnerability

References:

• OpenStack Homepage (OpenStack)
  
• It's possible to add a security group rule for VRRP with a dport (CVE-2019-9735) (OpenStack)