CVE-2018-14636

    Dashboard / Vulnerabilities / CVE-2018-14636

    CVE-2018-14636

    Published: 10 Sept 2018Last Modified: 8 Jul 2026

    Summary:

    Details: Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief window could be extended indefinitely if the instance's port is set administratively down prior to live-migration and kept down after the migration is complete. This is possible due to the Open vSwitch integration bridge being connected to the instance during migration. When connected to the integration bridge, all traffic for instances using the same Open vSwitch instance would potentially be visible to the migrated guest, as the required Open vSwitch VLAN filters are only applied post-migration. Versions of openstack-neutron before 13.0.0.0b2, 12.0.3, 11.0.5 are vulnerable.

    References: https://bugs.launchpad.net/neutron/+bug/1734320, https://bugs.launchpad.net/neutron/+bug/1767422, https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14636

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 6dcfe3a9362ae5fcf18e5cfb59663e43446cd59c
    Fixed -None

    Affected versions

    12.0.2
    12.0.1
    12.0.0.0rc2
    12.0.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2018-14636 | CVE-DB