Lucene search

RedHatRHSA-2021:3503

HistorySep 13, 2021 - 10:21 a.m.

(RHSA-2021:3503) Important: Red Hat OpenStack Platform 13.0 (openstack-neutron) security update

2021-09-1310:21:29

access.redhat.com

red hat

openstack

neutron

security update

virtual network service

api

virtual networks

extensions

qos

acls

cve-2021-40085

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

44.8%

JSON

Neutron is a virtual network service for OpenStack. Just like OpenStack
Nova provides an API to dynamically request and configure virtual
servers, Neutron provides an API to dynamically request and configure
virtual networks. These networks connect “interfaces” from other
OpenStack services (e.g., virtual NICs from Nova VMs). The Neutron
API supports extensions to provide advanced network capabilities
(e.g., QoS, ACLs, network, monitoring, etc.).

Security Fix(es):

arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7noarchopenstack-neutron-rpc-server< 12.1.1-42.1.el7ostopenstack-neutron-rpc-server-12.1.1-42.1.el7ost.noarch.rpm
RedHat7noarchopenstack-neutron-common< 12.1.1-42.1.el7ostopenstack-neutron-common-12.1.1-42.1.el7ost.noarch.rpm
RedHat7noarchopenstack-neutron-openvswitch< 12.1.1-42.1.el7ostopenstack-neutron-openvswitch-12.1.1-42.1.el7ost.noarch.rpm
RedHat7noarchopenstack-neutron-macvtap-agent< 12.1.1-42.1.el7ostopenstack-neutron-macvtap-agent-12.1.1-42.1.el7ost.noarch.rpm
RedHat7noarchopenstack-neutron< 12.1.1-42.1.el7ostopenstack-neutron-12.1.1-42.1.el7ost.noarch.rpm
RedHat7noarchopenstack-neutron-linuxbridge< 12.1.1-42.1.el7ostopenstack-neutron-linuxbridge-12.1.1-42.1.el7ost.noarch.rpm
RedHat7noarchopenstack-neutron-sriov-nic-agent< 12.1.1-42.1.el7ostopenstack-neutron-sriov-nic-agent-12.1.1-42.1.el7ost.noarch.rpm
RedHat7noarchopenstack-neutron-ml2< 12.1.1-42.1.el7ostopenstack-neutron-ml2-12.1.1-42.1.el7ost.noarch.rpm
RedHat7noarchopenstack-neutron-metering-agent< 12.1.1-42.1.el7ostopenstack-neutron-metering-agent-12.1.1-42.1.el7ost.noarch.rpm
RedHat7noarchpython-neutron< 12.1.1-42.1.el7ostpython-neutron-12.1.1-42.1.el7ost.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	7	noarch	openstack-neutron-rpc-server	< 12.1.1-42.1.el7ost	openstack-neutron-rpc-server-12.1.1-42.1.el7ost.noarch.rpm
RedHat	7	noarch	openstack-neutron-common	< 12.1.1-42.1.el7ost	openstack-neutron-common-12.1.1-42.1.el7ost.noarch.rpm
RedHat	7	noarch	openstack-neutron-openvswitch	< 12.1.1-42.1.el7ost	openstack-neutron-openvswitch-12.1.1-42.1.el7ost.noarch.rpm
RedHat	7	noarch	openstack-neutron-macvtap-agent	< 12.1.1-42.1.el7ost	openstack-neutron-macvtap-agent-12.1.1-42.1.el7ost.noarch.rpm
RedHat	7	noarch	openstack-neutron	< 12.1.1-42.1.el7ost	openstack-neutron-12.1.1-42.1.el7ost.noarch.rpm
RedHat	7	noarch	openstack-neutron-linuxbridge	< 12.1.1-42.1.el7ost	openstack-neutron-linuxbridge-12.1.1-42.1.el7ost.noarch.rpm
RedHat	7	noarch	openstack-neutron-sriov-nic-agent	< 12.1.1-42.1.el7ost	openstack-neutron-sriov-nic-agent-12.1.1-42.1.el7ost.noarch.rpm
RedHat	7	noarch	openstack-neutron-ml2	< 12.1.1-42.1.el7ost	openstack-neutron-ml2-12.1.1-42.1.el7ost.noarch.rpm
RedHat	7	noarch	openstack-neutron-metering-agent	< 12.1.1-42.1.el7ost	openstack-neutron-metering-agent-12.1.1-42.1.el7ost.noarch.rpm
RedHat	7	noarch	python-neutron	< 12.1.1-42.1.el7ost	python-neutron-12.1.1-42.1.el7ost.noarch.rpm