Launchpad.net

CVE 2021-40085

An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.

Related bugs and status

CVE-2021-40085 (Candidate) is related to these bugs:

Bug #1939733: [OSSA-2021-005] Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085)

		In	Importance	Status
1939733	[OSSA-2021-005] Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085)	neutron	Critical	Fix Released
1939733	[OSSA-2021-005] Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085)	OpenStack Security Advisory	High	Fix Released
1939733	[OSSA-2021-005] Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085)	Ubuntu Cloud Archive	Undecided	New
1939733	[OSSA-2021-005] Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085)	Ubuntu Cloud Archive victoria	Undecided	Fix Committed
1939733	[OSSA-2021-005] Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085)	Ubuntu Cloud Archive ussuri	Undecided	Fix Committed
1939733	[OSSA-2021-005] Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085)	Ubuntu Cloud Archive xena	Undecided	New
1939733	[OSSA-2021-005] Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085)	Ubuntu Cloud Archive wallaby	Undecided	Fix Committed
1939733	[OSSA-2021-005] Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085)	Ubuntu Cloud Archive queens	Undecided	Fix Released
1939733	[OSSA-2021-005] Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085)	Ubuntu Cloud Archive rocky	Undecided	Fix Released
1939733	[OSSA-2021-005] Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085)	Ubuntu Cloud Archive stein	Undecided	Fix Released
1939733	[OSSA-2021-005] Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085)	Ubuntu Cloud Archive train	Undecided	Fix Released
1939733	[OSSA-2021-005] Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085)	neutron (Ubuntu)	Undecided	Fix Released
1939733	[OSSA-2021-005] Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085)	neutron (Ubuntu Hirsute)	Undecided	Won't Fix
1939733	[OSSA-2021-005] Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085)	neutron (Ubuntu Bionic)	Undecided	New
1939733	[OSSA-2021-005] Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085)	neutron (Ubuntu Impish)	Undecided	Fix Released
1939733	[OSSA-2021-005] Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085)	neutron (Ubuntu Focal)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2021-40085

Related bugs and status

Related bugs

References