CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-40797

An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. By making API requests involving nonexistent controllers, an authenticated user may cause the API worker to consume increasing amounts of memory, resulting in API performance degradation or denial of service.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 56.2%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 4.0

References

Products affected by CVE-2021-40797

Openstack » Neutron » Version: 10.0.0

cpe:2.3:a:openstack:neutron:10.0.0
Openstack » Neutron » Version: 10.0.1

cpe:2.3:a:openstack:neutron:10.0.1
Openstack » Neutron » Version: 10.0.2

cpe:2.3:a:openstack:neutron:10.0.2
Openstack » Neutron » Version: 10.0.2-1.1

cpe:2.3:a:openstack:neutron:10.0.2-1.1
Openstack » Neutron » Version: 10.0.3

cpe:2.3:a:openstack:neutron:10.0.3
Openstack » Neutron » Version: 10.0.4

cpe:2.3:a:openstack:neutron:10.0.4
Openstack » Neutron » Version: 10.0.5

cpe:2.3:a:openstack:neutron:10.0.5
Openstack » Neutron » Version: 10.0.6

cpe:2.3:a:openstack:neutron:10.0.6
Openstack » Neutron » Version: 10.0.7

cpe:2.3:a:openstack:neutron:10.0.7
Openstack » Neutron » Version: 10.0.7-30

cpe:2.3:a:openstack:neutron:10.0.7-30
Openstack » Neutron » Version: 10.0.7-88

cpe:2.3:a:openstack:neutron:10.0.7-88
Openstack » Neutron » Version: 10.0.8

cpe:2.3:a:openstack:neutron:10.0.8
Openstack » Neutron » Version: 11.0.0

cpe:2.3:a:openstack:neutron:11.0.0
Openstack » Neutron » Version: 11.0.1

cpe:2.3:a:openstack:neutron:11.0.1
Openstack » Neutron » Version: 11.0.2

cpe:2.3:a:openstack:neutron:11.0.2
Openstack » Neutron » Version: 11.0.3

cpe:2.3:a:openstack:neutron:11.0.3
Openstack » Neutron » Version: 11.0.4

cpe:2.3:a:openstack:neutron:11.0.4
Openstack » Neutron » Version: 11.0.5

cpe:2.3:a:openstack:neutron:11.0.5
Openstack » Neutron » Version: 11.0.5-50

cpe:2.3:a:openstack:neutron:11.0.5-50
Openstack » Neutron » Version: 11.0.6

cpe:2.3:a:openstack:neutron:11.0.6
Openstack » Neutron » Version: 11.0.7

cpe:2.3:a:openstack:neutron:11.0.7
Openstack » Neutron » Version: 11.0.8-45

cpe:2.3:a:openstack:neutron:11.0.8-45
Openstack » Neutron » Version: 12.0.0

cpe:2.3:a:openstack:neutron:12.0.0
Openstack » Neutron » Version: 12.0.1

cpe:2.3:a:openstack:neutron:12.0.1
Openstack » Neutron » Version: 12.0.2

cpe:2.3:a:openstack:neutron:12.0.2
Openstack » Neutron » Version: 12.0.3

cpe:2.3:a:openstack:neutron:12.0.3
Openstack » Neutron » Version: 12.0.4

cpe:2.3:a:openstack:neutron:12.0.4
Openstack » Neutron » Version: 12.0.5

cpe:2.3:a:openstack:neutron:12.0.5
Openstack » Neutron » Version: 12.0.6

cpe:2.3:a:openstack:neutron:12.0.6
Openstack » Neutron » Version: 12.1.0

cpe:2.3:a:openstack:neutron:12.1.0
Openstack » Neutron » Version: 12.1.1

cpe:2.3:a:openstack:neutron:12.1.1
Openstack » Neutron » Version: 12.1.1-120

cpe:2.3:a:openstack:neutron:12.1.1-120
Openstack » Neutron » Version: 13.0.0

cpe:2.3:a:openstack:neutron:13.0.0
Openstack » Neutron » Version: 13.0.0.0

cpe:2.3:a:openstack:neutron:13.0.0.0
Openstack » Neutron » Version: 13.0.1

cpe:2.3:a:openstack:neutron:13.0.1
Openstack » Neutron » Version: 13.0.2

cpe:2.3:a:openstack:neutron:13.0.2
Openstack » Neutron » Version: 13.0.3

cpe:2.3:a:openstack:neutron:13.0.3
Openstack » Neutron » Version: 13.0.4

cpe:2.3:a:openstack:neutron:13.0.4
Openstack » Neutron » Version: 13.0.5

cpe:2.3:a:openstack:neutron:13.0.5
Openstack » Neutron » Version: 13.0.6

cpe:2.3:a:openstack:neutron:13.0.6
Openstack » Neutron » Version: 13.0.7

cpe:2.3:a:openstack:neutron:13.0.7
Openstack » Neutron » Version: 13.0.7-98

cpe:2.3:a:openstack:neutron:13.0.7-98
Openstack » Neutron » Version: 14.0.0

cpe:2.3:a:openstack:neutron:14.0.0
Openstack » Neutron » Version: 14.0.2

cpe:2.3:a:openstack:neutron:14.0.2
Openstack » Neutron » Version: 14.0.3

cpe:2.3:a:openstack:neutron:14.0.3
Openstack » Neutron » Version: 14.0.4

cpe:2.3:a:openstack:neutron:14.0.4
Openstack » Neutron » Version: 14.1.0

cpe:2.3:a:openstack:neutron:14.1.0
Openstack » Neutron » Version: 14.2.0

cpe:2.3:a:openstack:neutron:14.2.0
Openstack » Neutron » Version: 14.3.0

cpe:2.3:a:openstack:neutron:14.3.0
Openstack » Neutron » Version: 14.3.1

cpe:2.3:a:openstack:neutron:14.3.1
Openstack » Neutron » Version: 14.4.0

cpe:2.3:a:openstack:neutron:14.4.0
Openstack » Neutron » Version: 14.4.1

cpe:2.3:a:openstack:neutron:14.4.1
Openstack » Neutron » Version: 14.4.2

cpe:2.3:a:openstack:neutron:14.4.2
Openstack » Neutron » Version: 14.4.2-34

cpe:2.3:a:openstack:neutron:14.4.2-34
Openstack » Neutron » Version: 15.0.0

cpe:2.3:a:openstack:neutron:15.0.0
Openstack » Neutron » Version: 15.0.1

cpe:2.3:a:openstack:neutron:15.0.1
Openstack » Neutron » Version: 15.0.2

cpe:2.3:a:openstack:neutron:15.0.2
Openstack » Neutron » Version: 15.1.0

cpe:2.3:a:openstack:neutron:15.1.0
Openstack » Neutron » Version: 15.2.0

cpe:2.3:a:openstack:neutron:15.2.0
Openstack » Neutron » Version: 15.3.0

cpe:2.3:a:openstack:neutron:15.3.0
Openstack » Neutron » Version: 15.3.1

cpe:2.3:a:openstack:neutron:15.3.1
Openstack » Neutron » Version: 15.3.3

cpe:2.3:a:openstack:neutron:15.3.3
Openstack » Neutron » Version: 15.3.4

cpe:2.3:a:openstack:neutron:15.3.4
Openstack » Neutron » Version: 16.0.0

cpe:2.3:a:openstack:neutron:16.0.0
Openstack » Neutron » Version: 16.1.0

cpe:2.3:a:openstack:neutron:16.1.0
Openstack » Neutron » Version: 16.2.0

cpe:2.3:a:openstack:neutron:16.2.0
Openstack » Neutron » Version: 16.3.0

cpe:2.3:a:openstack:neutron:16.3.0
Openstack » Neutron » Version: 16.3.1

cpe:2.3:a:openstack:neutron:16.3.1
Openstack » Neutron » Version: 16.3.2

cpe:2.3:a:openstack:neutron:16.3.2
Openstack » Neutron » Version: 17.0.0

cpe:2.3:a:openstack:neutron:17.0.0
Openstack » Neutron » Version: 17.1.0

cpe:2.3:a:openstack:neutron:17.1.0
Openstack » Neutron » Version: 17.1.1

cpe:2.3:a:openstack:neutron:17.1.1
Openstack » Neutron » Version: 17.1.2

cpe:2.3:a:openstack:neutron:17.1.2
Openstack » Neutron » Version: 17.1.2-12

cpe:2.3:a:openstack:neutron:17.1.2-12
Openstack » Neutron » Version: 17.1.3

cpe:2.3:a:openstack:neutron:17.1.3
Openstack » Neutron » Version: 18.0.0

cpe:2.3:a:openstack:neutron:18.0.0
Openstack » Neutron » Version: 18.0.0-31

cpe:2.3:a:openstack:neutron:18.0.0-31
Openstack » Neutron » Version: 18.1.0

cpe:2.3:a:openstack:neutron:18.1.0
Openstack » Neutron » Version: 7.0.0

cpe:2.3:a:openstack:neutron:7.0.0
Openstack » Neutron » Version: 7.0.1

cpe:2.3:a:openstack:neutron:7.0.1
Openstack » Neutron » Version: 7.0.2

cpe:2.3:a:openstack:neutron:7.0.2
Openstack » Neutron » Version: 7.0.3

cpe:2.3:a:openstack:neutron:7.0.3
Openstack » Neutron » Version: 7.0.4

cpe:2.3:a:openstack:neutron:7.0.4
Openstack » Neutron » Version: 7.1.0

cpe:2.3:a:openstack:neutron:7.1.0
Openstack » Neutron » Version: 7.1.1

cpe:2.3:a:openstack:neutron:7.1.1
Openstack » Neutron » Version: 7.1.2

cpe:2.3:a:openstack:neutron:7.1.2
Openstack » Neutron » Version: 7.2.0

cpe:2.3:a:openstack:neutron:7.2.0
Openstack » Neutron » Version: 7.2.0-12.1

cpe:2.3:a:openstack:neutron:7.2.0-12.1
Openstack » Neutron » Version: 8.0.0

cpe:2.3:a:openstack:neutron:8.0.0
Openstack » Neutron » Version: 8.1.0

cpe:2.3:a:openstack:neutron:8.1.0
Openstack » Neutron » Version: 8.1.1

cpe:2.3:a:openstack:neutron:8.1.1
Openstack » Neutron » Version: 8.1.2

cpe:2.3:a:openstack:neutron:8.1.2
Openstack » Neutron » Version: 8.2.0

cpe:2.3:a:openstack:neutron:8.2.0
Openstack » Neutron » Version: 8.3.0

cpe:2.3:a:openstack:neutron:8.3.0
Openstack » Neutron » Version: 8.3.0-11.1

cpe:2.3:a:openstack:neutron:8.3.0-11.1
Openstack » Neutron » Version: 8.4.0

cpe:2.3:a:openstack:neutron:8.4.0
Openstack » Neutron » Version: 9.0.0

cpe:2.3:a:openstack:neutron:9.0.0
Openstack » Neutron » Version: 9.1.0

cpe:2.3:a:openstack:neutron:9.1.0
Openstack » Neutron » Version: 9.1.1

cpe:2.3:a:openstack:neutron:9.1.1
Openstack » Neutron » Version: 9.2.0

cpe:2.3:a:openstack:neutron:9.2.0
Openstack » Neutron » Version: 9.3.0

cpe:2.3:a:openstack:neutron:9.3.0
Openstack » Neutron » Version: 9.3.1

cpe:2.3:a:openstack:neutron:9.3.1
Openstack » Neutron » Version: 9.3.1-2.1

cpe:2.3:a:openstack:neutron:9.3.1-2.1
Openstack » Neutron » Version: 9.4.0

cpe:2.3:a:openstack:neutron:9.4.0
Openstack » Neutron » Version: 9.4.1

cpe:2.3:a:openstack:neutron:9.4.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-40797

Products

Pricing

Contact Us