Skip to content
OpenAdvisories
Medium RHSA-2018:2715 1 CVE

Red Hat Security Advisory: openstack-neutron security and bug fix update

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 11

ReleasePackageFixed in
Red Hat · OpenStack 10 openstack:10::el7 openstack-neutron 1:9.4.1-28.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-neutron-common 1:9.4.1-28.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-neutron-linuxbridge 1:9.4.1-28.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-neutron-macvtap-agent 1:9.4.1-28.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-neutron-metering-agent 1:9.4.1-28.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-neutron-ml2 1:9.4.1-28.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-neutron-openvswitch 1:9.4.1-28.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-neutron-rpc-server 1:9.4.1-28.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-neutron-sriov-nic-agent 1:9.4.1-28.el7ost
Red Hat · OpenStack 10 openstack:10::el7 python-neutron 1:9.4.1-28.el7ost
Red Hat · OpenStack 10 openstack:10::el7 python-neutron-tests 1:9.4.1-28.el7ost

Vulnerabilities 1

  • Medium 6.5
    CVE-2018-14635

    OpensStack Neutron Denial of Service Vulnerability

    When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests …

    The Openstack Project openstack-neutron neutron neutron Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1404709
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1511394
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1532280
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1545006
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1561907
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1570908
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1575356
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1576256
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1578414
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1579400
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1584845
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1589031
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1607822
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2715.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-14635
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-14635
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-14635