debian/python-os-vif vulnerabilities

Latest debian/python-os-vif CVEs

Newest publication first

1. CVE-2019-15753 OpenStack os-vif Ageing time of 0 disables linuxbridge MAC learning

   Published 2019-08-28

   Critical·CVSS 9.1

   In OpenStack os-vif 1.15.x before 1.15.2, and 1.16.0, a hard-coded MAC aging time of 0 disables MAC learning in linuxbridge, forcing obligatory Ethernet flooding of non-local destinations, which both impedes network performance and allows users to possibly view the content of pac...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.