CVE-2018-14635: OpenStack Neutron Linux Bridge ML2 Driver IP Address Validation Bypass

neutron Updated 02 Oct 2025

Summary

10/09/2018

Disclosed on

CVE-2018-14635

CVE

Yes i

Fix available

High

Severity

6.5

CVSS Score

CVE-2018-14635: When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. Affects neutron across 2 version ranges.

< 11.0.6 >= 12.0.0, < 12.0.4

Fixed in 11.0.6 or 12.0.4, depending on the release line you run. How to fix ↓

Also tracked for

neutron · Debian:11

The same CVE-2018-14635 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or Browse

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats

SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml

Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile

Javascript package-lock.json · yarn.lock · pnpm-lock.yaml

PHP composer.lock

Python poetry.lock · requirements.txt · Pipfile.lock

Go go.mod

Rust Cargo.lock

Ruby Gemfile.lock

Dart pubspec.lock

C/C++ conan.lock

Elixir mix.lock

Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Background

OpenStack Neutron is an open-source networking service that provides connectivity between different components and services in an OpenStack cloud environment. It includes various drivers for different networking technologies, including the Linux bridge ML2 driver. The Linux bridge ML2 driver allows tenants to create and attach ports to the network. However, a vulnerability in this driver allows non-privileged tenants to create and attach ports without specifying an IP address, bypassing IP address validation.

Vulnerability Detail

The vulnerability in the Linux bridge ML2 driver of OpenStack Neutron allows non-privileged tenants to create and attach ports without specifying an IP address. This bypasses the IP address validation process and can potentially lead to a denial of service (DoS) attack. An attacker could assign an IP address that conflicts with existing guests or routers, causing disruption to the network. This vulnerability affects versions of openstack-neutron before 13.0.0.0b2, 12.0.3, and 11.0.5.

How To Fix

Latest published version: 29.0.0 as of 22 Oct 2026

pip install --upgrade "neutron==29.0.0"

Upgrading to it may include breaking changes; the versions below are the minimum fixed release for this vulnerability.

If you can't move to the latest

The minimum fixed version depends on the release line you run.

< 11.0.6 11.0.6
```
pip install --upgrade "neutron==11.0.6"
```
>= 12.0.0, < 12.0.4 12.0.4
```
pip install --upgrade "neutron==12.0.4"
```

Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →

Workaround

There is no specific workaround mentioned for this vulnerability.

Conclusion

The Linux bridge ML2 driver in OpenStack Neutron is vulnerable to an IP address validation bypass, allowing non-privileged tenants to create and attach ports without specifying an IP address. This can potentially lead to a denial of service (DoS) attack. It is recommended to upgrade to a fixed version of openstack-neutron to mitigate this vulnerability. For further support on vulnerability remediation, contact DevNack.com.

See every vulnerability recorded for neutron →

FAQ

What is OpenStack Neutron?

OpenStack Neutron is an open-source networking service that provides connectivity between different components and services in an OpenStack cloud environment.

What is the Linux bridge ML2 driver?

The Linux bridge ML2 driver is a component of OpenStack Neutron that allows tenants to create and attach ports to the network.

What is the impact of this vulnerability?

This vulnerability allows non-privileged tenants to create and attach ports without specifying an IP address, bypassing IP address validation. It can potentially lead to a denial of service (DoS) attack if an IP address conflicting with existing guests or routers is assigned.

Which versions of openstack-neutron are affected?

Versions of openstack-neutron before 13.0.0.0b2, 12.0.3, and 11.0.5 are vulnerable.

How can I fix this vulnerability?

To fix this vulnerability, upgrade to a fixed version of openstack-neutron. Versions 11.0.6 and 12.0.4 or any subsequent fixed versions address this issue.

References

Related vulnerabilities

Recent vulnerabilities recorded for neutron.

View all neutron vulnerabilities →

How To Fix

Latest published version: 29.0.0 as of 22 Oct 2026

pip install --upgrade "neutron==29.0.0"

Upgrading to it may include breaking changes; the versions below are the minimum fixed release for this vulnerability.

If you can't move to the latest

The minimum fixed version depends on the release line you run.

< 11.0.6 11.0.6
```
pip install --upgrade "neutron==11.0.6"
```
>= 12.0.0, < 12.0.4 12.0.4
```
pip install --upgrade "neutron==12.0.4"
```

Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →

Subscribe to Vulert on Telegram

Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.

Join the channel →