Every CVE Search/ Get API key

CVE-2018-14635

OpensStack Neutron Denial of Service Vulnerability

6.5 MediumFix available

CVE-2018-14635 is a medium vulnerability (CVSS 6.5) in Openstack Neutron, published September 10, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.53%, the 84th percentile. Fixed in neutron 13.0.0.0b2.

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from outside of the allowed allocation pool. Versions of openstack-neutron before 13.0.0.0b2, 12.0.3 and 11.0.5 are vulnerable.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

2.53%Up 0.5 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 6.5

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from outside of the allowed allocation pool. Versions of openstack-neutron before 13.0.0.0b2, 12.0.3 and 11.0.5 are vulnerable.

Record
CVE-2018-14635
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-20
Updated
2026-11-02
EUVDEUVD-2018-0102 6.5

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from outside of the allowed allocation pool. Versions of openstack-neutron before 13.0.0.0b2, 12.0.3 and 11.0.5 are vulnerable.

Record
EUVD-2018-0102
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-x634-34m9-96mp 7.1

OpensStack Neutron Denial of Service Vulnerability

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from outside of the allowed allocation pool. Versions of openstack-neutron before 13.0.0.0b2, 12.0.3 and 11.0.5 are vulnerable.

Record
GHSA-x634-34m9-96mp
CVSS 4.0
7.1 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-20
Updated
2026-11-02
NVD 6.5

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from outside of the allowed allocation pool. Versions of openstack-neutron before 13.0.0.0b2, 12.0.3 and 11.0.5 are vulnerable.

Record
CVE-2018-14635
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
OSV 6.5

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from outside of the allowed allocation pool. Versions of openstack-neutron before 13.0.0.0b2, 12.0.3 and 11.0.5 are vulnerable.

Record
CVE-2018-14635
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2018-14635 6.5

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from outside of the allowed allocation pool. Versions of openstack-neutron before 13.0.0.0b2, 12.0.3 and 11.0.5 are vulnerable.

Record
DEBIAN-CVE-2018-14635
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 6 moreShow less
OSVGHSA-x634-34m9-96mp 7.1

OpensStack Neutron Denial of Service Vulnerability

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from outside of the allowed allocation pool. Versions of openstack-neutron before 13.0.0.0b2, 12.0.3 and 11.0.5 are vulnerable.

Record
GHSA-x634-34m9-96mp
CVSS 4.0
7.1 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-20
Updated
2026-11-02
OSVRHSA-2018:2710 6.5

Red Hat Security Advisory: openstack-neutron security update

Record
RHSA-2018:2710
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2018:2715 6.5

Red Hat Security Advisory: openstack-neutron security and bug fix update

Record
RHSA-2018:2715
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2018:3792 6.5

Red Hat Security Advisory: openstack-neutron security update

Record
RHSA-2018:3792
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2018-14635 6.5

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from outside of the allowed allocation pool. Versions of openstack-neutron before 13.0.0.0b2, 12.0.3 and 11.0.5 are vulnerable.

Record
UBUNTU-CVE-2018-14635
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVPYSEC-2018-93 No score

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from outside of the allowed allocation pool. Versions of openstack-neutron before 13.0.0.0b2, 12.0.3 and 11.0.5 are vulnerable.

Record
PYSEC-2018-93
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
neutron
PyPI
 13.0.0.0b1 to 13.0.0.0b1
13.0.0.0b2
neutron
PyPI
 before 11.0.6
11.0.6
neutron
PyPI
 12.0.0 up to 12.0.4
12.0.4
neutron
Debian:12
 before 2:13.0.0-1
2:13.0.0-1
neutron
Debian:13
 before 2:13.0.0-1
2:13.0.0-1
neutron
Debian:14
 before 2:13.0.0-1
2:13.0.0-1
neutron
PyPI
 13.0.0.0b1 up to 13.0.0.0b2
13.0.0.0b2
neutron
PyPI
 before 11.0.6, plus listed versions
0.010.0.510.0.610.0.711.0.311.0.411.0.5
11.0.6
neutron
PyPI
 12.0.0 up to 12.0.4, plus listed versions
12.0.112.0.212.0.3
12.0.4
neutron
PyPI
 before 11.0.6, 12.0.0 up to 12.0.4, plus listed versions
0.010.0.510.0.610.0.711.0.3
Show 5 moreShow less
11.0.411.0.512.0.112.0.212.0.3
11.0.612.0.4
Show 34 moreShow less
Affected packages
PackageAffectedFixed
openstack-neutron
Red Hat:openstack:13::el7
 before 1:12.0.3-5.el7ost
1:12.0.3-5.el7ost
openstack-neutron-common
Red Hat:openstack:13::el7
 before 1:12.0.3-5.el7ost
1:12.0.3-5.el7ost
openstack-neutron-linuxbridge
Red Hat:openstack:13::el7
 before 1:12.0.3-5.el7ost
1:12.0.3-5.el7ost
openstack-neutron-macvtap-agent
Red Hat:openstack:13::el7
 before 1:12.0.3-5.el7ost
1:12.0.3-5.el7ost
openstack-neutron-metering-agent
Red Hat:openstack:13::el7
 before 1:12.0.3-5.el7ost
1:12.0.3-5.el7ost
openstack-neutron-ml2
Red Hat:openstack:13::el7
 before 1:12.0.3-5.el7ost
1:12.0.3-5.el7ost
openstack-neutron-openvswitch
Red Hat:openstack:13::el7
 before 1:12.0.3-5.el7ost
1:12.0.3-5.el7ost
openstack-neutron-rpc-server
Red Hat:openstack:13::el7
 before 1:12.0.3-5.el7ost
1:12.0.3-5.el7ost
openstack-neutron-sriov-nic-agent
Red Hat:openstack:13::el7
 before 1:12.0.3-5.el7ost
1:12.0.3-5.el7ost
python-neutron
Red Hat:openstack:13::el7
 before 1:12.0.3-5.el7ost
1:12.0.3-5.el7ost
openstack-neutron
Red Hat:openstack:10::el7
 before 1:9.4.1-28.el7ost
1:9.4.1-28.el7ost
openstack-neutron-common
Red Hat:openstack:10::el7
 before 1:9.4.1-28.el7ost
1:9.4.1-28.el7ost
openstack-neutron-linuxbridge
Red Hat:openstack:10::el7
 before 1:9.4.1-28.el7ost
1:9.4.1-28.el7ost
openstack-neutron-macvtap-agent
Red Hat:openstack:10::el7
 before 1:9.4.1-28.el7ost
1:9.4.1-28.el7ost
openstack-neutron-metering-agent
Red Hat:openstack:10::el7
 before 1:9.4.1-28.el7ost
1:9.4.1-28.el7ost
openstack-neutron-ml2
Red Hat:openstack:10::el7
 before 1:9.4.1-28.el7ost
1:9.4.1-28.el7ost
openstack-neutron-openvswitch
Red Hat:openstack:10::el7
 before 1:9.4.1-28.el7ost
1:9.4.1-28.el7ost
openstack-neutron-rpc-server
Red Hat:openstack:10::el7
 before 1:9.4.1-28.el7ost
1:9.4.1-28.el7ost
openstack-neutron-sriov-nic-agent
Red Hat:openstack:10::el7
 before 1:9.4.1-28.el7ost
1:9.4.1-28.el7ost
python-neutron
Red Hat:openstack:10::el7
 before 1:9.4.1-28.el7ost
1:9.4.1-28.el7ost
python-neutron-tests
Red Hat:openstack:10::el7
 before 1:9.4.1-28.el7ost
1:9.4.1-28.el7ost
openstack-neutron
Red Hat:openstack:12::el7
 before 1:11.0.4-6.el7ost
1:11.0.4-6.el7ost
openstack-neutron-common
Red Hat:openstack:12::el7
 before 1:11.0.4-6.el7ost
1:11.0.4-6.el7ost
openstack-neutron-linuxbridge
Red Hat:openstack:12::el7
 before 1:11.0.4-6.el7ost
1:11.0.4-6.el7ost
openstack-neutron-macvtap-agent
Red Hat:openstack:12::el7
 before 1:11.0.4-6.el7ost
1:11.0.4-6.el7ost
openstack-neutron-metering-agent
Red Hat:openstack:12::el7
 before 1:11.0.4-6.el7ost
1:11.0.4-6.el7ost
openstack-neutron-ml2
Red Hat:openstack:12::el7
 before 1:11.0.4-6.el7ost
1:11.0.4-6.el7ost
openstack-neutron-openvswitch
Red Hat:openstack:12::el7
 before 1:11.0.4-6.el7ost
1:11.0.4-6.el7ost
openstack-neutron-rpc-server
Red Hat:openstack:12::el7
 before 1:11.0.4-6.el7ost
1:11.0.4-6.el7ost
openstack-neutron-sriov-nic-agent
Red Hat:openstack:12::el7
 before 1:11.0.4-6.el7ost
1:11.0.4-6.el7ost
python-neutron
Red Hat:openstack:12::el7
 before 1:11.0.4-6.el7ost
1:11.0.4-6.el7ost
python-neutron-tests
Red Hat:openstack:12::el7
 before 1:11.0.4-6.el7ost
1:11.0.4-6.el7ost
neutron
Ubuntu:16.04:LTS
 All versions, plus listed versions
2:7.0.0-0ubuntu12:8.0.0~b1-0ubuntu22:8.0.0~b2-0ubuntu42:8.0.0~b2-0ubuntu52:8.0.0~b2-0ubuntu7
Show 20 moreShow less
2:8.0.0~b3-0ubuntu12:8.0.0~rc1-0ubuntu12:8.0.0-0ubuntu12:8.1.0-0ubuntu0.16.04.22:8.1.2-0ubuntu12:8.2.0-0ubuntu12:8.3.0-0ubuntu12:8.3.0-0ubuntu1.12:8.3.0-0ubuntu1.22:8.4.0-0ubuntu12:8.4.0-0ubuntu22:8.4.0-0ubuntu32:8.4.0-0ubuntu42:8.4.0-0ubuntu52:8.4.0-0ubuntu62:8.4.0-0ubuntu7.12:8.4.0-0ubuntu7.22:8.4.0-0ubuntu7.32:8.4.0-0ubuntu7.42:8.4.0-0ubuntu7.5
 None known
neutron
Ubuntu:18.04:LTS
 before 2:12.0.3-0ubuntu1, plus listed versions
2:11.0.1-0ubuntu12:12.0.0~b1-0ubuntu12:12.0.0~b1-0ubuntu22:12.0.0~b2-0ubuntu12:12.0.0~b3-0ubuntu1
Show 12 moreShow less
2:12.0.0~rc1-0ubuntu12:12.0.0~rc2-0ubuntu12:12.0.0-0ubuntu12:12.0.0-0ubuntu1.12:12.0.0-0ubuntu1.22:12.0.0-0ubuntu1.32:12.0.0-0ubuntu1.42:12.0.0-0ubuntu22:12.0.0-0ubuntu32:12.0.1-0ubuntu12:12.0.1-0ubuntu1.12:12.0.2-0ubuntu1
2:12.0.3-0ubuntu1

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 29 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open