Skip to content
OpenAdvisories
Medium RHSA-2021:3503 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Platform 13.0 (openstack-neutron) security update

Published Sep 13, 2024 · Updated Oct 14, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · OpenStack 13 openstack:13::el7 openstack-neutron 1:12.1.1-42.1.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-neutron-common 1:12.1.1-42.1.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-neutron-linuxbridge 1:12.1.1-42.1.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-neutron-macvtap-agent 1:12.1.1-42.1.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-neutron-metering-agent 1:12.1.1-42.1.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-neutron-ml2 1:12.1.1-42.1.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-neutron-openvswitch 1:12.1.1-42.1.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-neutron-rpc-server 1:12.1.1-42.1.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-neutron-sriov-nic-agent 1:12.1.1-42.1.el7ost
Red Hat · OpenStack 13 openstack:13::el7 python-neutron 1:12.1.1-42.1.el7ost

Vulnerabilities 1

  • Medium 6.5
    CVE-2021-40085

    OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value

    An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.

    neutron neutron neutron Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1998052
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3503.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-40085
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-40085
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-40085
  • article
    https://security.openstack.org/ossa/OSSA-2021-005.html