CVE-2021-40085

Related Files

Ubuntu Security Notice USN-6067-1

Posted May 10, 2023

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 6067-1 - David Sinquin discovered that OpenStack Neutron incorrectly handled the default Open vSwitch firewall rules. An attacker could possibly use this issue to impersonate the IPv6 addresses of other systems on the network. This issue only affected Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Jake Yip and Justin Mammarella discovered that OpenStack Neutron incorrectly handled the linuxbridge driver when ebtables-nft is being used. An attacker could possibly use this issue to impersonate the hardware address of other systems on the network. This issue only affected Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.

tags | advisory

systems | linux, ubuntu

advisories | CVE-2021-20267, CVE-2021-38598, CVE-2021-40085, CVE-2021-40797, CVE-2022-3277

SHA-256 | 836fc58983503cea6accc902e2c2997895b5dfe647bcd965b113040cafacba9e

Download | Favorite | View

Debian Security Advisory 4983-1

Posted Oct 28, 2021

Authored by Debian | Site debian.org

Debian Linux Security Advisory 4983-1 - Pavel Toporkov discovered a vulnerability in Neutron, the OpenStack virtual network service, which allowed a reconfiguration of dnsmasq via crafted dhcp_extra_opts parameters.

tags | advisory

systems | linux, debian

advisories | CVE-2021-40085

SHA-256 | ae710f0c5eab343d5d187ff386bcfbb45872e736dea1d7e2fdeed1e91997000b

Download | Favorite | View

Red Hat Security Advisory 2021-3488-01

Posted Sep 15, 2021

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2021-3488-01 - Neutron is a virtual network service for OpenStack. Just like OpenStack Nova provides an API to dynamically request and configure virtual servers, Neutron provides an API to dynamically request and configure virtual networks. These networks connect "interfaces" from other OpenStack services. The Neutron API supports extensions to provide advanced network capabilities.

tags | advisory

systems | linux, redhat

advisories | CVE-2021-40085

SHA-256 | 2d5d24721728b8d31b9a5cde4de4186a4a7e8431901691c9e32ca865dbe4227d

Download | Favorite | View

Red Hat Security Advisory 2021-3502-01

Posted Sep 13, 2021

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2021-3502-01 - Neutron is a virtual network service for OpenStack. Just like OpenStack Nova provides an API to dynamically request and configure virtual servers, Neutron provides an API to dynamically request and configure virtual networks. These networks connect "interfaces" from other OpenStack services. The Neutron API supports extensions to provide advanced network capabilities.

tags | advisory

systems | linux, redhat

advisories | CVE-2021-40085

SHA-256 | 2ca62346cc992bcd195fdae20db85256e39f24390d3e1abaf27159a8f5e949d0

Download | Favorite | View

Red Hat Security Advisory 2021-3503-01

Posted Sep 13, 2021

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2021-3503-01 - Neutron is a virtual network service for OpenStack. Just like OpenStack Nova provides an API to dynamically request and configure virtual servers, Neutron provides an API to dynamically request and configure virtual networks. These networks connect "interfaces" from other OpenStack services. The Neutron API supports extensions to provide advanced network capabilities.

tags | advisory

systems | linux, redhat

advisories | CVE-2021-40085

SHA-256 | d2ddadd2b75be435f80f94aaa374f8b76420387613e7b834272cdb504a5ef7bf

Download | Favorite | View

Red Hat Security Advisory 2021-3481-01

Posted Sep 9, 2021

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2021-3481-01 - Neutron is a virtual network service for Openstack, and a part of Netstack. Just like OpenStack Nova provides an API to dynamically request and configure virtual servers, Neutron provides an API to dynamically request and configure virtual networks. These networks connect "interfaces" from other OpenStack services. The Neutron API supports extensions to provide advanced network capabilities.

tags | advisory

systems | linux, redhat

advisories | CVE-2021-40085

SHA-256 | da47cdc793dd683b7678fcde7dcec87f4e5078f46b13aba9c810d2140a8fb93a

Download | Favorite | View