tocsin

CVE-2019-10876

2 advisories.

PyPI/neutron CVE-2019-10876: medium 6.5

OpenStack Neutron overlapping security group rules prevents compute node network configuration

Action: Upgrade neutron to 11.0.7 or later.

pip install neutron==11.0.7
pip install neutron==12.0.6
pip install neutron==13.0.3

Affected

introducedfixedlast affected
11.0.011.0.7-
12.0.012.0.6-
13.0.013.0.3-

Fixed versions

11.0.712.0.613.0.3

Sources

CVE-2019-10876 · published · modified · JSON

PyPI/neutron CVE-2019-10876: unknown

An issue was discovered in OpenStack Neutron 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By creating two security groups with separate/overlapping port ranges, an authenticated use

Action: Upgrade neutron to 11.0.7 or later.

pip install neutron==12.0.6
pip install neutron==11.0.7
pip install neutron==13.0.3

Affected

introducedfixedlast affected
011.0.7-
12.0.012.0.6-
13.0.013.0.3-

Fixed versions

12.0.611.0.713.0.3

Sources

CVE-2019-10876 · published · modified · JSON