USN-4036-1: OpenStack Neutron vulnerability

Published Jun 25, 2019

Updated

Erik Olof Gunnar Andersson discovered that OpenStack Neutron incorrectly handled certain security group rules in the iptables firewall module. An authenticated attacker could possibly use this issue to block further application of security group rules for other instances.

Affected Software

0 affected components

Event History

Feb 23, 2026

Advisory Published

via Ubuntu·05:43 PM

Data Sourced

via Ubuntu·05:43 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2019-9735

Frequently Asked Questions

What is the vulnerability ID for this OpenStack Neutron vulnerability?

The vulnerability ID for this OpenStack Neutron vulnerability is USN-4036-1.

What is the impact of this vulnerability?

An authenticated attacker could use this vulnerability to block further application of security group rules for other instances.

How can I check if I am affected by this vulnerability?

You can check if you are affected by this vulnerability by verifying the version of the affected software on your Ubuntu system.

How do I fix this vulnerability?

To fix this vulnerability, update the affected packages to the specified versions available from the Ubuntu repositories.

Where can I find more information about this vulnerability?

More information about this vulnerability can be found on the Ubuntu security advisory page and the launchpad.net links provided in the references.