Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [day] [month] [year] [list]
Date: Tue, 31 Aug 2021 15:00:38 +0000
From: Jeremy Stanley <>
Subject: [OSSA-2021-005] Neutron: Arbitrary dnsmasq reconfiguration via
 extra_dhcp_opts (CVE-2021-40085)

OSSA-2021-005: Arbitrary dnsmasq reconfiguration via extra_dhcp_opts

:Date: August 31, 2021
:CVE: CVE-2021-40085

- Neutron: <16.4.1, >=17.0.0 <17.2.1, >=18.0.0 <18.1.1

Pavel Toporkov reported a vulnerability in Neutron. By supplying a
specially crafted extra_dhcp_opts value, an authenticated user may add
arbitrary configuration to the dnsmasq process in order to crash the
service, change parameters for other tenants sharing the same
interface, or otherwise alter that daemon's behavior. This
vulnerability may also be used to trigger a configuration parsing
buffer overflow in versions of dnsmasq prior to 2.81, which could lead
to remote code execution. All Neutron deployments are affected.

- (Ussuri)
- (Victoria)
- (Wallaby)
- (Xena)

- Pavel Toporkov (CVE-2021-40085)


Jeremy Stanley

Download attachment "signature.asc" of type "application/pgp-signature" (964 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.