Approved changes feed: RSS · Atom

cpe:2.3:a:openstack:neutron:13.0.0.0:b1:*:*:*:*:*:*

part: a version: 13.0.0.0 update: b1

VendorOpenstack (7b0cf974-b2b5-592e-bdf4-6953805ef02a)
ProductNeutron (a2b4d295-6d29-5e8f-898a-a53ccda2d10f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/openstackhelm/neutron purl2cpe 2026-06-01 10:17:03.563797
pkg:github/openstack/neutron purl2cpe 2026-06-01 10:17:03.563798
pkg:maven/org.apache.jclouds.api/openstack-neutron purl2cpe 2026-06-01 10:17:03.563799
pkg:pypi/neutron purl2cpe 2026-06-01 10:17:03.563801
pkg:rpm/opensuse/openstack-neutron purl2cpe 2026-06-01 10:17:03.563802

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-14635 vulnerable 2026-06-03 14:38:12.325496 Details available
MEDIUM (6.5)
When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from outside of the allowed allocation pool. Versions of openstack-neutron before 13.0.0.0b2, 12.0.3 and 11.0.5 are vulnerable.
Published: 2018-09-10T19:00:00.000Z
Updated: 2024-08-05T09:38:12.947Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.