Read the docs
TI-2021-17741 Aliases CVE-2021-40797GHSA-cpx3-696p-3cw9

An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x…

Priority LOW 32CWE-772Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 2 fixed, 4 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-772.

Summary

An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. By making API requests involving nonexistent controllers, an authenticated user may cause the API worker to consume increasing amounts of memory, resulting in API performance degradation or denial of service.

Why it matters now

EPSS 0.01809 78th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial neutron (PyPI): 16.4.1, 17.2.1, 18.1.1Red Hat: 2 advisoriesRed Hat: 2 fixed, 4 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—neutron (PyPI)before 16.4.116.4.1Patch availableGHSA-cpx3-696p-3cw9
—neutron (PyPI)17.0.0 to before 17.2.117.2.1Patch availableGHSA-cpx3-696p-3cw9
—neutron (PyPI)18.0.0 to before 18.1.118.1.1Patch availableGHSA-cpx3-696p-3cw9
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • neutron (PyPI) Vendor— Affected before 16.4.1 Fixed in 16.4.1 Patch available GHSA-cpx3-696p-3cw9
  • neutron (PyPI) Vendor— Affected 17.0.0 to before 17.2.1 Fixed in 17.2.1 Patch available GHSA-cpx3-696p-3cw9
  • neutron (PyPI) Vendor— Affected 18.0.0 to before 18.1.1 Fixed in 18.1.1 Patch available GHSA-cpx3-696p-3cw9

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:openstack:neutron:*:*:*:*:*:*:*:*before 16.4.1; 17.0.0 to before 17.2.1; 18.0.0 to before 18.1.1VulnerableOpenStack
  • cpe:2.3:a:openstack:neutron:*:*:*:*:*:*:*:* Versions before 16.4.1; 17.0.0 to before 17.2.1; 18.0.0 to before 18.1.1 Vulnerable ·OpenStack

Remediation

  • Fix · GHSA-cpx3-696p-3cw9 neutron (PyPI) Fixed in 16.4.1 Advisory →
  • Fix · GHSA-cpx3-696p-3cw9 neutron (PyPI) Fixed in 17.2.1 Advisory →
  • Fix · GHSA-cpx3-696p-3cw9 neutron (PyPI) Fixed in 18.1.1 Advisory →

Red Hat 2 advisories

  • RHSA-2022:0990 Released 2022-03-24 · Red Hat rating Moderate
    Red Hat OpenStack Platform 16.1 (openstack-neutron) security update
    • Red Hat OpenStack Platform 16.1 openstack-neutron-1:15.2.1-1.20220112133420.el8ost, openstack-neutron-common-1:15.2.1-1.20220112133420.el8ost, openstack-neutron-linuxbridge-1:15.2.1-1.20220112133420.el8ost +7
  • RHSA-2022:0996 Released 2022-03-23 · Red Hat rating Moderate
    Red Hat OpenStack Platform 16.2 (openstack-neutron) security update
    • Red Hat OpenStack Platform 16.2 openstack-neutron-1:15.3.5-2.20220113150031.el8ost, openstack-neutron-common-1:15.3.5-2.20220113150031.el8ost, openstack-neutron-linuxbridge-1:15.3.5-2.20220113150031.el8ost +7

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenStack Platform 10 (Newton)AffectedNo fix planned: Out of support scope
Red Hat OpenStack Platform 13 (Queens)AffectedNo fix planned: Out of support scope
Red Hat OpenStack Platform 17.1AffectedNo fix planned: Out of support scope
Red Hat OpenStack Platform 18.0AffectedNo fix yet: Fix deferred
Red Hat OpenStack Platform 16.1Fixed RHSA-2022:0990
Red Hat OpenStack Platform 16.2Fixed RHSA-2022:0996
Not affected: 1 product
  • Red Hat Integration Camel K 1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-40797
  2. 2026-10-03 Alias added: GHSA-cpx3-696p-3cw9
  3. 2026-10-07 Affected versions changed · Red Hat

References

Exploit 1

Patch 2

Advisory 1

Other 3

  • TI-2022-03027 Uncontrolled resource consumption in openstack-neutron CVSS 3.1MEDIUM 6.5
  • TI-2015-07327 The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows… CVSS 3.0CRITICAL 9.1
  • TI-2014-00181 The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1… CVSS 2.0HIGH 9.0
  • TI-2021-16185 OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address… CVSS 3.1CRITICAL 9.1
  • TI-2016-04653 The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows… CVSS 3.0HIGH 8.2
  • TI-2016-04654 The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows… CVSS 3.0HIGH 8.2
See all 24 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences