Description
An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | neutron | 2:18.1.0-3 | — |
| Debian 13 | neutron | 2:18.1.0-3 | — |
| Debian 12 | neutron | 2:18.1.0-3 | — |
| Debian 11 | neutron | 2:17.2.1-0+deb11u1 | DSA-4983-1 |
| Debian 10 | neutron | 2:13.0.7+git.2021.09.27.bace3d1890-0+deb10u1 | DSA-4983-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 9 | neutron | 2:9.1.1-3+deb9u3 | DLA-3027-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | neutron | 2:20.3.0-0ubuntu1.1 | USN-6067-1 |
| Ubuntu 20.04 LTS | neutron | 2:16.4.2-0ubuntu6.2 | USN-6067-1 |
| Ubuntu 18.04 LTS | neutron | 2:12.1.1-0ubuntu8.1 | USN-6067-1 |
| Ubuntu 16.04 LTS | neutron | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenStack 16 | python3-neutron +9 | 1:15.2.1-1.20210409073447.el8ost | RHSA-2021:3488, RHSA-2021:3481 |
| Red Hat OpenStack 13 | python-neutron +9 | 1:12.1.1-42.1.el7ost | RHSA-2021:3503 |
| Red Hat OpenStack 10 | python-neutron +10 | 1:9.4.1-56.el7ost | RHSA-2021:3502 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE OpenStack Cloud Crowbar 9 | grafana | 6.7.4-3.26.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-barbican | 7.0.1~dev24-3.14.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-cinder | 13.0.10~dev24-3.34.2 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-heat-gbp | 14.0.1~dev4-3.9.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-horizon-plugin-gbp-ui | 14.0.1~dev3-3.9.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-ironic | 11.1.5~dev18-3.28.2 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-keystone | 14.2.1~dev9-3.28.2 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-neutron | 13.0.8~dev206-3.40.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-neutron-gbp | 14.0.1~dev33-3.31.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-Pillow | 5.2.0-3.17.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-XStatic-jquery-ui | 1.13.0.1-4.3.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-lxml | 4.2.4-3.3.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud Crowbar 9 | release-notes-suse-openstack-cloud | 9.20220413-3.30.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud Crowbar 9 | rubygem-sinatra | 1.4.6-4.3.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-neutron +1 | 11.0.9~dev69-3.43.1 | SUSE-SU-2022:1884-1 |
| SUSE OpenStack Cloud 9 | ardana-barbican | 9.0+git.1644879908.8a641c1-3.13.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | grafana | 6.7.4-3.26.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | openstack-barbican | 7.0.1~dev24-3.14.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | openstack-cinder | 13.0.10~dev24-3.34.2 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | openstack-heat-gbp | 14.0.1~dev4-3.9.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | openstack-horizon-plugin-gbp-ui | 14.0.1~dev3-3.9.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | openstack-ironic | 11.1.5~dev18-3.28.2 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | openstack-keystone | 14.2.1~dev9-3.28.2 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | openstack-neutron | 13.0.8~dev206-3.40.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | openstack-neutron-gbp | 14.0.1~dev33-3.31.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | python-Pillow | 5.2.0-3.17.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | python-XStatic-jquery-ui | 1.13.0.1-4.3.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | python-lxml | 4.2.4-3.3.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | release-notes-suse-openstack-cloud | 9.20220413-3.30.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-barbican | 7.0.1~dev24-3.35.2 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-cinder | 13.0.10~dev24-3.38.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-designate | 7.0.2~dev2-3.35.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-glance | 17.0.1~dev30-3.33.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-heat | 11.0.4~dev4-3.35.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-horizon | 14.1.1~dev11-4.39.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-ironic | 11.1.5~dev18-4.33.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-keystone | 14.2.1~dev9-3.36.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-magnum | 7.2.1~dev1-4.35.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-manila | 7.4.2~dev60-3.41.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-monasca | 2.7.1~dev10-3.37.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-monasca-ceilometer | 1.8.2~dev3-3.35.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-neutron | 13.0.8~dev206-6.39.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-nova | 18.3.1~dev91-3.39.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-octavia | 3.2.3~dev7-4.35.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-sahara | 9.0.2~dev15-3.35.1 | SUSE-SU-2022:1729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-swift | 2.19.2~dev48-2.30.1 | SUSE-SU-2022:1729-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE OpenStack Cloud 8 | openstack-neutron +1 | 11.0.9~dev69-3.43.1 | SUSE-SU-2022:1884-1 |
| SUSE HPE Helion OpenStack 8 | openstack-neutron +1 | 11.0.9~dev69-3.43.1 | SUSE-SU-2022:1884-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | neutron | < 16.4.1 | 16.4.1 | GHSA-fh73-gjvg-349c |
| PyPI | neutron | >= 17.0.0, < 17.2.1 | 17.2.1 | GHSA-fh73-gjvg-349c |
| PyPI | neutron | >= 18.0.0, < 18.1.1 | 18.1.1 | GHSA-fh73-gjvg-349c |
| PyPI | neutron | < 16.4.1 · >= 17.0.0, < 17.2.1 · >= 18.0.0, < 18.1.1 | 16.4.1, 17.2.1, 18.1.1 | PYSEC-2021-361 |
Advisories 11
- RHSA-2021:3503 Red Hat Security Advisory: Red Hat OpenStack Platform 13.0 (openstack-neutron) security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2021:3502 Red Hat Security Advisory: Red Hat OpenStack Platform 10.0 (openstack-neutron) security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2021:3488 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (openstack-neutron) security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2021:3481 Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (openstack-neutron) security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- USN-6067-1 neutron vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- DSA-4983-1 neutron - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-3027-1 neutron - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2022:1884-1 Security update for openstack-neutron SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:1729-1 Security update for ardana-barbican, grafana, openstack-barbican, openstack-cinder, openstack-heat-gbp, openstack-horizon-plugin-gbp-ui, openstack-ironic, openstack-keystone, openstack-neutron-gbp, python-lxml, release-notes-suse-openstack-cloud SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2023-1737 Juniper Patchday Juli 2023 BSI CERT-Bund (WID) · Jul 12, 2023
- WID-SEC-2023-1192 Red Hat OpenStack: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · May 10, 2023
References
- https://launchpad.net/bugs/1939733
- [oss-security] 20210831 [OSSA-2021-005] Neutron: Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085) mailing-list
- https://security.openstack.org/ossa/OSSA-2021-005.html
- [debian-lts-announce] 20211011 [SECURITY] [DLA 2781-1] neutron security update mailing-list
- DSA-4983 vendor-advisory
- [debian-lts-announce] 20220526 [SECURITY] [DLA 3027-1] neutron security update mailing-list