{"action":"Upgrade neutron to 10.0.8 or later.","affected":[{"fixed":"10.0.8","introduced":"0"},{"fixed":"11.0.7","introduced":"11.0.0"},{"fixed":"12.0.6","introduced":"12.0.0"},{"fixed":"13.0.3","introduced":"13.0.0"}],"component":"neutron","cve_ids":["CVE-2019-9735"],"ecosystem":"PyPI","epss":0.03705,"exploited":false,"fixed_versions":["10.0.8","11.0.7","12.0.6","13.0.3"],"ghsa_id":"GHSA-9773-3fqg-8w25","id":"tcs_01M5KFA178B871GE85RPPVRBFK","modified_at":"2024-10-03T21:33:52.025608Z","published_at":"2022-05-13T01:07:34Z","references":["https://osv.dev/vulnerability/GHSA-9773-3fqg-8w25","https://nvd.nist.gov/vuln/detail/CVE-2019-9735","https://access.redhat.com/errata/RHSA-2019:0879","https://access.redhat.com/errata/RHSA-2019:0916","https://access.redhat.com/errata/RHSA-2019:0935","https://github.com/openstack/neutron","https://github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2019-190.yaml","https://launchpad.net/bugs/1818385","https://seclists.org/bugtraq/2019/Mar/24","https://security.openstack.org/ossa/OSSA-2019-001.html","https://usn.ubuntu.com/4036-1","https://web.archive.org/web/20201208185619/http://www.securityfocus.com/bid/107390","https://www.debian.org/security/2019/dsa-4409","http://www.openwall.com/lists/oss-security/2019/03/18/2","http://www.securityfocus.com/bid/107390"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-9773-3fqg-8w25","url":"https://osv.dev/vulnerability/GHSA-9773-3fqg-8w25"}],"summary":"OpenStack Neutron's unsupported dport option prevents applying security groups"}