OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value

MEDIUM 6.5CVE-2021-40085 · GHSA-fh73-gjvg-349c · PYSEC-2021-361 · Published 31/08/2021 · updated 17/06/2026

Package	Affected versions	Patched versions
neutron PyPI	`≥ 17.0.0, < 17.2.1≥ 18.0.0, < 18.1.1< 16.4.1`	`17.2.118.1.116.4.1`
neutron openstack	`≥ 17.0.0, < 17.2.1≥ 18.0.0, < 18.1.1< 16.4.1`	`17.2.118.1.116.4.1`

Description

An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.

NVD description

An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.

References

nvd.nist.gov/vuln/detail/CVE-2021-40085 · ADVISORY
openstack/neutron commit df891f0 · WEB
openstack/neutron · PACKAGE
pypa/advisory-database · WEB
launchpad.net/bugs/1939733 · WEB
lists.debian.org/debian-lts-announce/2021/10/msg00005.html · WEB
lists.debian.org/debian-lts-announce/2022/05/msg00038.html · WEB
security.openstack.org/ossa/OSSA-2021-005.html · WEB
debian.org/security/2021/dsa-4983 · WEB
openwall.com/lists/oss-security/2021/08/31/2 · WEB
GitHub Advisory GHSA-fh73-gjvg-349c · ADVISORY

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free