OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2021-40085 · ADVISORY
• openstack/neutron commit df891f0 · WEB
• openstack/neutron · PACKAGE
• pypa/advisory-database · WEB
• launchpad.net/bugs/1939733 · WEB
• lists.debian.org/debian-lts-announce/2021/10/msg00005.html · WEB
• lists.debian.org/debian-lts-announce/2022/05/msg00038.html · WEB
• security.openstack.org/ossa/OSSA-2021-005.html · WEB
• debian.org/security/2021/dsa-4983 · WEB
• openwall.com/lists/oss-security/2021/08/31/2 · WEB
• GitHub Advisory GHSA-fh73-gjvg-349c · ADVISORY

Lỗ hổng khác của neutron

• CVE-2026-50266THẤP 2.2In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set devic…
• CVE-2026-49299TRUNG BÌNH 5.3In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defi…
• CVE-2024-53916CAO 7.5In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the p…
• CVE-2023-3637TRUNG BÌNH 6.5An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of se…
• CVE-2022-3277TRUNG BÌNH 6.5An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of se…