CVE-2021-40085
CVE-2021-40085
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.
CVSS 6.5 · Medium · EPSS 1.8% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
neutron Debian:12
- Affected ranges
- ECOSYSTEM: < 2:18.1.0-3
Update to 2:18.1.0-3
neutron Debian:13
- Affected ranges
- ECOSYSTEM: < 2:18.1.0-3
Update to 2:18.1.0-3
neutron Debian:14
- Affected ranges
- ECOSYSTEM: < 2:18.1.0-3
Update to 2:18.1.0-3
neutron PyPI
- Versions
- 0.0
- 10.0.5
- 10.0.6
- 10.0.7
- 11.0.3
- 11.0.4
- 11.0.5
- 11.0.6
- 11.0.7
- 11.0.8
- 12.0.0
- 12.0.0.0b3
- 12.0.0.0rc1
- 12.0.0.0rc2
- 12.0.1
- 12.0.2
- 12.0.3
- 12.0.4
- 12.0.5
- 12.0.6
- 12.1.0
- 12.1.1
- 13.0.0
- 13.0.0.0b1
- 13.0.0.0b2
- 13.0.0.0b3
- 13.0.0.0rc1
- 13.0.0.0rc2
- 13.0.1
- 13.0.2
- 13.0.3
- 13.0.4
- 13.0.5
- 13.0.6
- 13.0.7
- 14.0.0
- 14.0.0.0b1
- 14.0.0.0b2
- 14.0.0.0b3
- 14.0.0.0rc1
- 14.0.1
- 14.0.2
- 14.0.3
- 14.0.4
- 14.1.0
- 14.2.0
- 14.3.0
- 14.3.1
- 14.4.0
- 14.4.1
- 14.4.2
- 15.0.0
- 15.0.0.0b1
- 15.0.0.0rc1
- 15.0.0.0rc2
- 15.0.1
- 15.0.2
- 15.1.0
- 15.2.0
- 15.3.0
- 15.3.1
- 15.3.2
- 15.3.3
- 15.3.4
- 16.0.0
- 16.0.0.0b1
- 16.0.0.0rc1
- 16.0.0.0rc2
- 16.1.0
- 16.2.0
- 16.3.0
- 16.3.1
- 16.3.2
- 16.4.0
- Affected ranges
- ECOSYSTEM: < 16.4.1
Update to 16.4.1
neutron PyPI
- Versions
- 17.0.0
- 17.1.0
- 17.1.1
- 17.1.2
- 17.2.0
- Affected ranges
- ECOSYSTEM: ≥ 17.0.0, < 17.2.1
Update to 17.2.1
neutron PyPI
- Versions
- 18.0.0
- 18.1.0
- Affected ranges
- ECOSYSTEM: ≥ 18.0.0, < 18.1.1
Update to 18.1.1
neutron PyPI
- Versions
- 0.0
- 10.0.5
- 10.0.6
- 10.0.7
- 11.0.3
- 11.0.4
- 11.0.5
- 11.0.6
- 11.0.7
- 11.0.8
- 12.0.0
- 12.0.0.0b3
- 12.0.0.0rc1
- 12.0.0.0rc2
- 12.0.1
- 12.0.2
- 12.0.3
- 12.0.4
- 12.0.5
- 12.0.6
- 12.1.0
- 12.1.1
- 13.0.0
- 13.0.0.0b1
- 13.0.0.0b2
- 13.0.0.0b3
- 13.0.0.0rc1
- 13.0.0.0rc2
- 13.0.1
- 13.0.2
- 13.0.3
- 13.0.4
- 13.0.5
- 13.0.6
- 13.0.7
- 14.0.0
- 14.0.0.0b1
- 14.0.0.0b2
- 14.0.0.0b3
- 14.0.0.0rc1
- 14.0.1
- 14.0.2
- 14.0.3
- 14.0.4
- 14.1.0
- 14.2.0
- 14.3.0
- 14.3.1
- 14.4.0
- 14.4.1
- 14.4.2
- 15.0.0
- 15.0.0.0b1
- 15.0.0.0rc1
- 15.0.0.0rc2
- 15.0.1
- 15.0.2
- 15.1.0
- 15.2.0
- 15.3.0
- 15.3.1
- 15.3.2
- 15.3.3
- 15.3.4
- 16.0.0
- 16.0.0.0b1
- 16.0.0.0rc1
- 16.0.0.0rc2
- 16.1.0
- 16.2.0
- 16.3.0
- 16.3.1
- 16.3.2
- 16.4.0
- 17.0.0
- 17.1.0
- 17.1.1
- 17.1.2
- 17.2.0
- 18.0.0
- 18.1.0
- Affected ranges
- ECOSYSTEM: < 16.4.1 ∪ ≥ 17.0.0, < 17.2.1 ∪ ≥ 18.0.0, < 18.1.1
Update to 16.4.1; Update to 17.2.1; Update to 18.1.1
neutron Ubuntu:16.04:LTS
- Versions
- 2:7.0.0-0ubuntu1
- 2:8.0.0~b1-0ubuntu2
- 2:8.0.0~b2-0ubuntu4
- 2:8.0.0~b2-0ubuntu5
- 2:8.0.0~b2-0ubuntu7
- 2:8.0.0~b3-0ubuntu1
- 2:8.0.0~rc1-0ubuntu1
- 2:8.0.0-0ubuntu1
- 2:8.1.0-0ubuntu0.16.04.2
- 2:8.1.2-0ubuntu1
- 2:8.2.0-0ubuntu1
- 2:8.3.0-0ubuntu1
- 2:8.3.0-0ubuntu1.1
- 2:8.3.0-0ubuntu1.2
- 2:8.4.0-0ubuntu1
- 2:8.4.0-0ubuntu2
- 2:8.4.0-0ubuntu3
- 2:8.4.0-0ubuntu4
- 2:8.4.0-0ubuntu5
- 2:8.4.0-0ubuntu6
- 2:8.4.0-0ubuntu7.1
- 2:8.4.0-0ubuntu7.2
- 2:8.4.0-0ubuntu7.3
- 2:8.4.0-0ubuntu7.4
- 2:8.4.0-0ubuntu7.5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
neutron Ubuntu:18.04:LTS
- Versions
- 2:11.0.1-0ubuntu1
- 2:12.0.0~b1-0ubuntu1
- 2:12.0.0~b1-0ubuntu2
- 2:12.0.0~b2-0ubuntu1
- 2:12.0.0~b3-0ubuntu1
- 2:12.0.0~rc1-0ubuntu1
- 2:12.0.0~rc2-0ubuntu1
- 2:12.0.0-0ubuntu1
- 2:12.0.0-0ubuntu1.1
- 2:12.0.0-0ubuntu1.2
- 2:12.0.0-0ubuntu1.3
- 2:12.0.0-0ubuntu1.4
- 2:12.0.0-0ubuntu2
- 2:12.0.0-0ubuntu3
- 2:12.0.1-0ubuntu1
- 2:12.0.1-0ubuntu1.1
- 2:12.0.2-0ubuntu1
- 2:12.0.3-0ubuntu1
- 2:12.0.5-0ubuntu1
- 2:12.0.5-0ubuntu4
- 2:12.0.5-0ubuntu5
- 2:12.0.6-0ubuntu1
- 2:12.0.6-0ubuntu2
- 2:12.0.6-0ubuntu3
- 2:12.1.0-0ubuntu1
- 2:12.1.1-0ubuntu1
- 2:12.1.1-0ubuntu2
- 2:12.1.1-0ubuntu3
- 2:12.1.1-0ubuntu4
- 2:12.1.1-0ubuntu7
- 2:12.1.1-0ubuntu8
- Affected ranges
- ECOSYSTEM: < 2:12.1.1-0ubuntu8.1
Update to 2:12.1.1-0ubuntu8.1
neutron Ubuntu:20.04:LTS
- Versions
- 2:15.0.0-0ubuntu1
- 2:16.0.0~b1~git2019121613.3e8abb9a8f-0ubuntu1
- 2:16.0.0~b2~git2020020712.d5b33ffc77-0ubuntu1
- 2:16.0.0~b2~git2020020712.d5b33ffc77-0ubuntu3
- 2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu1
- 2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu2
- 2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu3
- 2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu4
- 2:16.0.0~b3~git2020041013.e74c8f8c88-0ubuntu1
- 2:16.0.0~b3~git2020041516.5f42488a9a-0ubuntu1
- 2:16.0.0~b3~git2020041516.5f42488a9a-0ubuntu2
- 2:16.0.0-0ubuntu0.20.04.1
- 2:16.0.0-0ubuntu0.20.04.2
- 2:16.1.0-0ubuntu1
- 2:16.1.0-0ubuntu2
- 2:16.2.0-0ubuntu1
- 2:16.2.0-0ubuntu2
- 2:16.2.0-0ubuntu3
- 2:16.3.0-0ubuntu3
- 2:16.3.1-0ubuntu1
- 2:16.3.1-0ubuntu1.1
- 2:16.3.2-0ubuntu2
- 2:16.3.2-0ubuntu3
- 2:16.4.0-0ubuntu2
- 2:16.4.0-0ubuntu3
- 2:16.4.1-0ubuntu2
- 2:16.4.2-0ubuntu1
- 2:16.4.2-0ubuntu2
- 2:16.4.2-0ubuntu3
- 2:16.4.2-0ubuntu4
- 2:16.4.2-0ubuntu5
- 2:16.4.2-0ubuntu6
- 2:16.4.2-0ubuntu6.1
- Affected ranges
- ECOSYSTEM: < 2:16.4.2-0ubuntu6.2
Update to 2:16.4.2-0ubuntu6.2
Original sources
- https://launchpad.net/bugs/1939733
- http://www.openwall.com/lists/oss-security/2021/08/31/2
- https://security.openstack.org/ossa/OSSA-2021-005.html
- https://lists.debian.org/debian-lts-announce/2021/10/msg00005.html
- https://www.debian.org/security/2021/dsa-4983
- https://lists.debian.org/debian-lts-announce/2022/05/msg00038.html
- https://nvd.nist.gov/vuln/detail/CVE-2021-40085