Improper access control in openstack-neutron - CVE-2021-40085

Vulnerability identifier: #VU57242

CSH Severity: Low

CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-40085

CWE-ID: CWE-284

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. A remote user can bypass implemented security restrictions and reconfigure dnsmasq via a crafted extra_dhcp_opts value.

openstack-neutron
HPE Helion Openstack
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
Ubuntu
openstack-neutron (Red Hat package)
openstack-neutron-openvswitch-agent
openstack-neutron
python-neutron
openstack-neutron-server
openstack-neutron-metering-agent
openstack-neutron-metadata-agent
openstack-neutron-macvtap-agent
openstack-neutron-linuxbridge-agent
openstack-neutron-l3-agent
openstack-neutron-ha-tool
openstack-neutron-doc
openstack-neutron-dhcp-agent
python-neutron (Ubuntu package)
python3-neutron (Ubuntu package)
Red Hat OpenStack
Contrail Cloud

Install updates from vendor's website.

openstack-neutron - addressed in versions 16.4.1, 17.2.1, 18.1.1
openstack-neutron (Red Hat package) - addressed in versions 9.4.1-56.el7ost, 12.1.1-42.1.el7ost, 15.2.1-1.20210409073447.el8ost, 15.3.5-2.20210608154813.el8ost.3
Red Hat OpenStack - addressed in versions 10.0, 13.0, 16.1, 16.2
openstack-neutron-openvswitch-agent - update to 11.0.9~dev69-3.43.1
openstack-neutron - update to 11.0.9~dev69-3.43.1
python-neutron - update to 11.0.9~dev69-3.43.1
openstack-neutron-server - update to 11.0.9~dev69-3.43.1
openstack-neutron-metering-agent - update to 11.0.9~dev69-3.43.1
openstack-neutron-metadata-agent - update to 11.0.9~dev69-3.43.1
openstack-neutron-macvtap-agent - update to 11.0.9~dev69-3.43.1
openstack-neutron-linuxbridge-agent - update to 11.0.9~dev69-3.43.1
openstack-neutron-l3-agent - update to 11.0.9~dev69-3.43.1
openstack-neutron-ha-tool - update to 11.0.9~dev69-3.43.1
openstack-neutron-doc - update to 11.0.9~dev69-3.43.1
openstack-neutron-dhcp-agent - update to 11.0.9~dev69-3.43.1
python-neutron (Ubuntu package) - update to 2:12.1.1-0ubuntu8.1
Contrail Cloud - update to 16.3.0
python3-neutron (Ubuntu package) - addressed in versions 2:16.4.2-0ubuntu6.2, 2:20.3.0-0ubuntu1.1

• https://security.openstack.org/ossa/OSSA-2021-005.html
• https://launchpad.net/bugs/1939733
• http://www.openwall.com/lists/oss-security/2021/08/31/2
• https://lists.debian.org/debian-lts-announce/2021/10/msg00005.html
• https://www.debian.org/security/2021/dsa-4983

• Multiple vulnerabilities in Openstack Neutron
• SUSE update for openstack-neutron
• Ubuntu update for neutron
• Multiple vulnerabilities in Juniper Networks Contrail Cloud
• Improper access control in Red Hat OpenStack 16.1 packages
• Improper access control in Red Hat OpenStack 10.0 packages
• Improper access control in Red Hat OpenStack 13.0 packages
• Improper access control in Red Hat OpenStack 16.2 packages