CVE-2018-14635

Name of the Vulnerable Software and Affected Versions openstack-neutron versions prior to 13.0.0.0b2 openstack-neutron version 12.0.3 and earlier openstack-neutron version 11.0.5 and earlier

Description The issue allows non-privileged tenants to create and attach ports without specifying an IP address, bypassing IP address validation. This could lead to a denial of service if an IP address conflicting with existing guests or routers is assigned from outside the allowed allocation pool.

Recommendations For versions prior to 13.0.0.0b2, update to version 13.0.0.0b2 or later. For version 12.0.3 and earlier, update to version 12.0.4 or later. For version 11.0.5 and earlier, update to version 11.0.6 or later.