CVE-2021-40797 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2021-40797 Interim 1 16 2025-02-17T00:27:34Z current 2021-09-10T01:05:32Z 2025-02-17T00:27:34Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2021-40797 An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. By making API requests involving nonexistent controllers, an authenticated user may cause the API worker to consume increasing amounts of memory, resulting in API performance degradation or denial of service. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2022-May/011199.html E-Mail link for SUSE-SU-2022:1884-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 openstack-neutron-11.0.9~dev69-3.43.1 openstack-neutron-dhcp-agent-11.0.9~dev69-3.43.1 openstack-neutron-doc-11.0.9~dev69-3.43.1 openstack-neutron-ha-tool-11.0.9~dev69-3.43.1 openstack-neutron-l3-agent-11.0.9~dev69-3.43.1 openstack-neutron-linuxbridge-agent-11.0.9~dev69-3.43.1 openstack-neutron-macvtap-agent-11.0.9~dev69-3.43.1 openstack-neutron-metadata-agent-11.0.9~dev69-3.43.1 openstack-neutron-metering-agent-11.0.9~dev69-3.43.1 openstack-neutron-openvswitch-agent-11.0.9~dev69-3.43.1 openstack-neutron-server-11.0.9~dev69-3.43.1 python-neutron-11.0.9~dev69-3.43.1 openstack-neutron-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 openstack-neutron-dhcp-agent-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 openstack-neutron-doc-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 openstack-neutron-ha-tool-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 openstack-neutron-l3-agent-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 openstack-neutron-linuxbridge-agent-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 openstack-neutron-macvtap-agent-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 openstack-neutron-metadata-agent-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 openstack-neutron-metering-agent-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 openstack-neutron-openvswitch-agent-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 openstack-neutron-server-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 python-neutron-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 openstack-neutron-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 openstack-neutron-dhcp-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 openstack-neutron-doc-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 openstack-neutron-ha-tool-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 openstack-neutron-l3-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 openstack-neutron-linuxbridge-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 openstack-neutron-macvtap-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 openstack-neutron-metadata-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 openstack-neutron-metering-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 openstack-neutron-openvswitch-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 openstack-neutron-server-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 python-neutron-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 openstack-neutron-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-neutron-dhcp-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-neutron-doc-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-neutron-ha-tool-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-neutron-l3-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-neutron-linuxbridge-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-neutron-macvtap-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-neutron-metadata-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-neutron-metering-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-neutron-openvswitch-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-neutron-server-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 python-neutron-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. By making API requests involving nonexistent controllers, an authenticated user may cause the API worker to consume increasing amounts of memory, resulting in API performance degradation or denial of service. CVE-2021-40797 HPE Helion OpenStack 8:openstack-neutron-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-dhcp-agent-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-doc-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-ha-tool-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-l3-agent-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-linuxbridge-agent-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-macvtap-agent-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-metadata-agent-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-metering-agent-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-openvswitch-agent-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-server-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:python-neutron-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-dhcp-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-doc-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-ha-tool-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-l3-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-linuxbridge-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-macvtap-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-metadata-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-metering-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-openvswitch-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-server-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:python-neutron-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-dhcp-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-doc-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-ha-tool-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-l3-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-linuxbridge-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-macvtap-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metadata-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metering-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-openvswitch-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-server-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:python-neutron-11.0.9~dev69-3.43.1 moderate 4 AV:N/AC:L/Au:S/C:N/I:N/A:P 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H