Skip to content
OpenAdvisories
Medium RHSA-2018:2710 1 CVE

Red Hat Security Advisory: openstack-neutron security update

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · OpenStack 13 openstack:13::el7 openstack-neutron 1:12.0.3-5.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-neutron-common 1:12.0.3-5.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-neutron-linuxbridge 1:12.0.3-5.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-neutron-macvtap-agent 1:12.0.3-5.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-neutron-metering-agent 1:12.0.3-5.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-neutron-ml2 1:12.0.3-5.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-neutron-openvswitch 1:12.0.3-5.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-neutron-rpc-server 1:12.0.3-5.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-neutron-sriov-nic-agent 1:12.0.3-5.el7ost
Red Hat · OpenStack 13 openstack:13::el7 python-neutron 1:12.0.3-5.el7ost

Vulnerabilities 1

  • Medium 6.5
    CVE-2018-14635

    OpensStack Neutron Denial of Service Vulnerability

    When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests …

    The Openstack Project openstack-neutron neutron neutron Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1607822
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2710.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-14635
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-14635
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-14635