{"id":"CVE-2019-15753","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-15753","generatedAt":"2026-10-29T01:57:24.266Z","title":"In OpenStack os-vif 1.15.x before 1.15.2, and 1.16.0, a hard-coded MAC aging time of 0 disables MAC learning in linuxbridge, forcing obligatory Ethernet flooding of non-local destinations, which both impedes network performance and allows users to…","description":"In OpenStack os-vif 1.15.x before 1.15.2, and 1.16.0, a hard-coded MAC aging time of 0 disables MAC learning in linuxbridge, forcing obligatory Ethernet flooding of non-local destinations, which both impedes network performance and allows users to possibly view the content of packets for instances belonging to other tenants sharing the same network. Only deployments using the linuxbridge backend are affected. This occurs in PyRoute2.add() in internal/command/ip/linux/impl_pyroute2.py.","published":"2019-08-28T21:15:11.000Z","lastModified":"2026-06-17T02:21:01.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":9.1,"severity":"CRITICAL","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"},"cwe":["CWE-770"],"affected":["openstack/os-vif"],"epss":{"score":0.02612,"percentile":0.85338,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (2.61%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://www.openwall.com/lists/oss-security/2019/08/29/2","tags":["Mailing List","Patch","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://launchpad.net/bugs/1837252","tags":["Issue Tracking","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://review.opendev.org/672834","tags":["Patch"],"source":"cve@mitre.org"},{"url":"https://review.opendev.org/678098","tags":["Patch"],"source":"cve@mitre.org"},{"url":"https://security.openstack.org/ossa/OSSA-2019-004.html","tags":["Patch","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2019/08/29/2","tags":["Mailing List","Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/bugs/1837252","tags":["Issue Tracking","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://review.opendev.org/672834","tags":["Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://review.opendev.org/678098","tags":["Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.openstack.org/ossa/OSSA-2019-004.html","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-15753","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}