Traffic Inspection Vulnerability in OpenStack Neutron by OpenStack
CVE-2018-14636

5.3MEDIUM

Key Information:

Vendor: The Openstack Project
Status: Openstack-neutron
Vendor: CVE Published:; 10 September 2018

🔔 Create The Openstack Project Vulnerability Alert

What is CVE-2018-14636?

The vulnerability is linked to improper isolation during the live migration of instances within OpenStack Neutron. When live-migrated, instances can momentarily access the network traffic of other instances on the same hypervisor, potentially exposing sensitive data. This situation arises if the instance's port is administratively set to a down state before migration and remains so afterwards. The Open vSwitch integration bridge remains connected throughout the migration process, delaying the application of necessary VLAN filters until after migration. As a result, instances may gain visibility into the traffic of other instances, highlighting a significant risk in multi-tenant environments.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch