CVE-2019-15753

In OpenStack os-vif 1.15.x before 1.15.2, and 1.16.0, a hard-coded MAC aging time of 0 disables MAC learning in linuxbridge, forcing obligatory Ethernet flooding of non-local destinations, which both impedes network performance and allows users to possibly view the content of packets for instances belonging to other tenants sharing the same network. Only deployments using the linuxbridge backend are affected. This occurs in PyRoute2.add() in internal/command/ip/linux/impl_pyroute2.py.

• CWE-770

• http://www.openwall.com/lists/oss-security/2019/08/29/2Mailing List, Patch, Third Party Advisory
• https://launchpad.net/bugs/1837252Issue Tracking, Third Party Advisory
• https://review.opendev.org/672834Patch
• https://review.opendev.org/678098Patch
• https://security.openstack.org/ossa/OSSA-2019-004.htmlPatch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2019/08/29/2Mailing List, Patch, Third Party Advisory
• https://launchpad.net/bugs/1837252Issue Tracking, Third Party Advisory
• https://review.opendev.org/672834Patch
• https://review.opendev.org/678098Patch
• https://security.openstack.org/ossa/OSSA-2019-004.htmlPatch, Vendor Advisory

Published

Aug 28, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-15748SITOS six Build v6.2.1 permits unauthorised users to upload …9.8
• CVE-2019-15749SITOS six Build v6.2.1 allows a user to change their passwor…6.5
• CVE-2019-1575Information disclosure in PAN-OS 7.1.23 and earlier, PAN-OS …8.8
• CVE-2019-15750A Cross-Site Scripting (XSS) vulnerability in the blog funct…6.1
• CVE-2019-15751An unrestricted file upload vulnerability in SITOS six Build…9.8
• CVE-2019-15752Docker Desktop Community Edition before 2.1.0.1 allows local…7.8
• CVE-2019-15757libMirage 3.2.2 in CDemu has a NULL pointer dereference in t…
• CVE-2019-15758An issue was discovered in Binaryen 1.38.32. Missing validat…6.5
• CVE-2019-15759An issue was discovered in Binaryen 1.38.32. Two visitors in…6.5
• CVE-2019-1576Command injection in PAN-0S 9.0.2 and earlier may allow an a…8.8
• CVE-2019-15766The KSLABS KSWEB (aka ru.kslabs.ksweb) application 3.93 for …8.8
• CVE-2019-15767In GNU Chess 6.2.5, there is a stack-based buffer overflow i…