Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2021-40797

Good to know:

icon

Date: September 8, 2021

An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. By making API requests involving nonexistent controllers, an authenticated user may cause the API worker to consume increasing amounts of memory, resulting in API performance degradation or denial of service.

Language: Python

Severity Score

Related Resources (8)

https://github.com/openstack/neutron/commit/e610a5eb9e71aa2549fb11e2139370d227787da2
https://nvd.nist.gov/vuln/detail/CVE-2021-40797
https://github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2021-329.yaml
http://www.openwall.com/lists/oss-security/2021/09/09/2
https://github.com/openstack/neutron
https://launchpad.net/bugs/1942179
https://security.openstack.org/ossa/OSSA-2021-006.html
https://www.mend.io/vulnerability-database/CVE-2021-40797

Severity Score

Weakness Type (CWE)

Missing Release of Resource after Effective Lifetime

CWE-772

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): SINGLE
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us