CVE-2021-40085: Debian Linux

Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days.

An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.

Affected products

• Debian Debian Linux: version 9.0 only; version 10.0 only; version 11.0 only
• Openstack Neutron: before 16.4.1 (fixed in 16.4.1); from 17.0.0, before 17.2.1 (fixed in 17.2.1); from 18.0.0, before 18.1.1 (fixed in 18.1.1)

Published 2021-08-31. Last modified 2026-06-17.