High severityNVD Advisory· Published Sep 8, 2021· Updated Aug 4, 2024
CVE-2021-40797
CVE-2021-40797
Description
An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. By making API requests involving nonexistent controllers, an authenticated user may cause the API worker to consume increasing amounts of memory, resulting in API performance degradation or denial of service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
neutronPyPI | < 16.4.1 | 16.4.1 |
neutronPyPI | >= 17.0.0, < 17.2.1 | 17.2.1 |
neutronPyPI | >= 18.0.0, < 18.1.1 | 18.1.1 |
Affected products
8- OpenStack/Neutrondescription
- ghsa-coords7 versionspkg:pypi/neutronpkg:rpm/suse/openstack-neutron&distro=HPE%20Helion%20OpenStack%208pkg:rpm/suse/openstack-neutron&distro=SUSE%20OpenStack%20Cloud%208pkg:rpm/suse/openstack-neutron&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208pkg:rpm/suse/openstack-neutron-doc&distro=HPE%20Helion%20OpenStack%208pkg:rpm/suse/openstack-neutron-doc&distro=SUSE%20OpenStack%20Cloud%208pkg:rpm/suse/openstack-neutron-doc&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208
< 16.4.1+ 6 more
- (no CPE)range: < 16.4.1
- (no CPE)range: < 11.0.9~dev69-3.43.1
- (no CPE)range: < 11.0.9~dev69-3.43.1
- (no CPE)range: < 11.0.9~dev69-3.43.1
- (no CPE)range: < 11.0.9~dev69-3.43.1
- (no CPE)range: < 11.0.9~dev69-3.43.1
- (no CPE)range: < 11.0.9~dev69-3.43.1
Patches
Vulnerability mechanics
References
7- github.com/advisories/GHSA-cpx3-696p-3cw9ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2021-40797ghsaADVISORY
- www.openwall.com/lists/oss-security/2021/09/09/2ghsamailing-listx_refsource_MLISTWEB
- github.com/openstack/neutron/commit/e610a5eb9e71aa2549fb11e2139370d227787da2ghsaWEB
- github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2021-329.yamlghsaWEB
- launchpad.net/bugs/1942179ghsax_refsource_MISCWEB
- security.openstack.org/ossa/OSSA-2021-006.htmlghsax_refsource_CONFIRMWEB
News mentions
0No linked articles in our index yet.