Skip to content
OpenAdvisories
Medium RHSA-2022:0996 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (openstack-neutron) security update

Published Sep 16, 2024 · Updated Oct 8, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-neutron 1:15.3.5-2.20220113150031.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-neutron-common 1:15.3.5-2.20220113150031.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-neutron-linuxbridge 1:15.3.5-2.20220113150031.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-neutron-macvtap-agent 1:15.3.5-2.20220113150031.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-neutron-metering-agent 1:15.3.5-2.20220113150031.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-neutron-ml2 1:15.3.5-2.20220113150031.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-neutron-openvswitch 1:15.3.5-2.20220113150031.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-neutron-rpc-server 1:15.3.5-2.20220113150031.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-neutron-sriov-nic-agent 1:15.3.5-2.20220113150031.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 python3-neutron 1:15.3.5-2.20220113150031.el8ost

Vulnerabilities 1

  • Medium 6.5
    CVE-2021-40797

    OpenStack Neutron Denial of Service vulnerability

    An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. By making API requests involving nonexistent controllers, an authenticated user may cause the API worker to consume increasing amo…

    neutron neutron neutron Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1880440
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1939601
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1969349
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1971545
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2000848
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2001495
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2001870
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2003248
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2013768
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2014025
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2024690
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2029310
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2031881
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0996.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-40797
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-40797
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-40797
  • article
    https://security.openstack.org/ossa/OSSA-2021-006.html