CVE-2021-40085

PoC —

CVSS 3.1

6.5 medium

EPSS

2%p78

Published

Aug 31, 2021 (Aug 31, 2021)

Modified

Jun 17, 2026

Description

An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.

Vendors: openstack debian
Products: neutron, debian linux
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.