Openstack-neutron (The Openstack Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2018-09-10. Vendor: The Openstack Project.

CVEs of Openstack-neutron

• CVE-2018-14636 - CVSS 5.3 (medium), 2018-09-10: Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief window could be extended indefinitely if…
• CVE-2018-14635 - CVSS 6.5 (medium), 2018-09-10: When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address…