CVE-2018-14635

2 advisories.

PyPI/neutron CVE-2018-14635: medium 6.5

OpensStack Neutron Denial of Service Vulnerability

Action: Upgrade neutron to 11.0.6 or later.

pip install neutron==13.0.0.0b2

pip install neutron==11.0.6

pip install neutron==12.0.4

Affected

introduced	fixed	last affected
13.0.0.0b1	13.0.0.0b2	-
0	11.0.6	-
12.0.0	12.0.4	-

Fixed versions

13.0.0.0b2

11.0.6

12.0.4

Sources

osv: GHSA-x634-34m9-96mp
https://nvd.nist.gov/vuln/detail/CVE-2018-14635
https://github.com/openstack/neutron/commit/54aa6e81cb17b33ce4d5d469cc11dec2869c762d
https://access.redhat.com/errata/RHSA-2018:2710
https://access.redhat.com/errata/RHSA-2018:2715
https://access.redhat.com/errata/RHSA-2018:2721
https://access.redhat.com/errata/RHSA-2018:3792
https://bugs.launchpad.net/neutron/+bug/1757482
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14635
https://git.openstack.org/cgit/openstack/neutron/commit/?id=54aa6e81cb17b33ce4d5d469cc11dec2869c762d
https://github.com/openstack/neutron
https://github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2018-93.yaml

CVE-2018-14635 · published 2022-05-13T01:07:33Z · modified 2024-09-25T21:00:51.908005Z · JSON

PyPI/neutron CVE-2018-14635: unknown

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service coul