OpenStack Security Advisory

  1. Bug #1939733
  2. Comment #4

Comment 4 for bug 1939733

Revision history for this message
Rodolfo Alonso (rodolfo-alonso-hernandez) wrote : Re: Remote Code Execution via extra_dhcp_opts

@Slawek, I would split the opt_value string each time, instead of removing the "\n". That will take only the first part of the string, removing the tail.

>>> opt_value = "xxx\n128,aa:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\n120,aa.cc\n128,:"
>>> opt_value.split()[0]
"xxx"