An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extradhcpopts value.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2:12.1.1-0ubuntu8.1", "binary_name": "neutron-common" }, { "binary_version": "2:12.1.1-0ubuntu8.1", "binary_name": "neutron-dhcp-agent" }, { "binary_version": "2:12.1.1-0ubuntu8.1", "binary_name": "neutron-l3-agent" }, { "binary_version": "2:12.1.1-0ubuntu8.1", "binary_name": "neutron-linuxbridge-agent" }, { "binary_version": "2:12.1.1-0ubuntu8.1", "binary_name": "neutron-macvtap-agent" }, { "binary_version": "2:12.1.1-0ubuntu8.1", "binary_name": "neutron-metadata-agent" }, { "binary_version": "2:12.1.1-0ubuntu8.1", "binary_name": "neutron-metering-agent" }, { "binary_version": "2:12.1.1-0ubuntu8.1", "binary_name": "neutron-openvswitch-agent" }, { "binary_version": "2:12.1.1-0ubuntu8.1", "binary_name": "neutron-plugin-linuxbridge-agent" }, { "binary_version": "2:12.1.1-0ubuntu8.1", "binary_name": "neutron-plugin-ml2" }, { "binary_version": "2:12.1.1-0ubuntu8.1", "binary_name": "neutron-plugin-openvswitch-agent" }, { "binary_version": "2:12.1.1-0ubuntu8.1", "binary_name": "neutron-plugin-sriov-agent" }, { "binary_version": "2:12.1.1-0ubuntu8.1", "binary_name": "neutron-server" }, { "binary_version": "2:12.1.1-0ubuntu8.1", "binary_name": "neutron-sriov-agent" }, { "binary_version": "2:12.1.1-0ubuntu8.1", "binary_name": "python-neutron" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2:16.4.2-0ubuntu6.2", "binary_name": "neutron-common" }, { "binary_version": "2:16.4.2-0ubuntu6.2", "binary_name": "neutron-dhcp-agent" }, { "binary_version": "2:16.4.2-0ubuntu6.2", "binary_name": "neutron-l3-agent" }, { "binary_version": "2:16.4.2-0ubuntu6.2", "binary_name": "neutron-linuxbridge-agent" }, { "binary_version": "2:16.4.2-0ubuntu6.2", "binary_name": "neutron-macvtap-agent" }, { "binary_version": "2:16.4.2-0ubuntu6.2", "binary_name": "neutron-metadata-agent" }, { "binary_version": "2:16.4.2-0ubuntu6.2", "binary_name": "neutron-metering-agent" }, { "binary_version": "2:16.4.2-0ubuntu6.2", "binary_name": "neutron-openvswitch-agent" }, { "binary_version": "2:16.4.2-0ubuntu6.2", "binary_name": "neutron-ovn-metadata-agent" }, { "binary_version": "2:16.4.2-0ubuntu6.2", "binary_name": "neutron-plugin-ml2" }, { "binary_version": "2:16.4.2-0ubuntu6.2", "binary_name": "neutron-server" }, { "binary_version": "2:16.4.2-0ubuntu6.2", "binary_name": "neutron-sriov-agent" }, { "binary_version": "2:16.4.2-0ubuntu6.2", "binary_name": "python3-neutron" } ] }