CVE-2021-40085 : An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1,

An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.

Published 2021-08-31 18:15:09

Updated 2022-06-13 19:56:51

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2021-40085

Debian » Debian Linux » Version: 9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 11.0
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Matching versions
Openstack » Neutron
Versions before (<) 16.4.1
cpe:2.3:a:openstack:neutron:*:*:*:*:*:*:*:*
Matching versions
Openstack » Neutron
Versions from including (>=) 18.0.0 and before (<) 18.1.1
cpe:2.3:a:openstack:neutron:*:*:*:*:*:*:*:*
Matching versions
Openstack » Neutron
Versions from including (>=) 17.0.0 and before (<) 17.2.1
cpe:2.3:a:openstack:neutron:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2021-40085

EPSS FAQ

0.32%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 70 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-40085

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.0	MEDIUM	AV:N/AC:L/Au:S/C:N/I:P/A:N	8.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N	2.8	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: High Availability: None

References for CVE-2021-40085

http://www.openwall.com/lists/oss-security/2021/08/31/2

oss-security - [OSSA-2021-005] Neutron: Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085)
Mailing List;Patch;Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/05/msg00038.html

[SECURITY] [DLA 3027-1] neutron security update
Mailing List;Third Party Advisory
https://www.debian.org/security/2021/dsa-4983

Debian -- Security Information -- DSA-4983-1 neutron
Third Party Advisory
https://security.openstack.org/ossa/OSSA-2021-005.html

OSSA-2021-005: Arbitrary dnsmasq reconfiguration via extra_dhcp_opts — OpenStack Security Advisories 0.0.1.dev241 documentation
Patch;Vendor Advisory
https://lists.debian.org/debian-lts-announce/2021/10/msg00005.html

[SECURITY] [DLA 2781-1] neutron security update
Mailing List;Third Party Advisory
https://launchpad.net/bugs/1939733

Bug #1939733 “[OSSA-2021-005] Arbitrary dnsmasq reconfiguration ...” : Bugs : neutron
Exploit;Issue Tracking;Third Party Advisory

Jump to

Vulnerability Details : CVE-2021-40085

Products affected by CVE-2021-40085

Exploit prediction scoring system (EPSS) score for CVE-2021-40085

CVSS scores for CVE-2021-40085

References for CVE-2021-40085