Red Hat Security Advisory

RHSA-2018:3792

openstack-neutron security update

Released 2018-12-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 12.0 openstack-neutron-1:11.0.4-6.el7ost, openstack-neutron-common-1:11.0.4-6.el7ost, openstack-neutron-linuxbridge-1:11.0.4-6.el7ost +8

Fixes 1 record

TI-2018-10500 CVE-2018-14635 · GHSA-x634-34m9-96mp

Improper input validation in openstack-neutron

LOW 34

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02527 Published 2018-09-10 Partial fix · 13.0.0.0b2, 11.0.6 +1 CWE-20