What is CVE-2021-40797?

CVE-2021-40797 is a medium-severity vulnerability in Openstack Neutron, classified under Missing Release of Resource after Effective Lifetime. CVSS score: 6.5/10. Published 2021-09-08.

How severe is CVE-2021-40797?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Openstack Neutron

CVE-2021-40797

An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. By making API requests involving nonexistent controllers, an authenticated user may cause the API worker to co…

EPSS: 0.018 (75.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Openstack Neutron
N/a — versions n/a

Weakness classification (CWE)

CWE-772 — Missing Release of Resource after Effective Lifetime

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC, Issue Tracking)
cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
cve@mitre.org (mailing-list, x_refsource_MLIST, Patch, Mailing List, Third Party Advisory)

Frequently asked questions

What is CVE-2021-40797?: CVE-2021-40797 is a medium-severity vulnerability in Openstack Neutron, classified under Missing Release of Resource after Effective Lifetime. CVSS score: 6.5/10. Published 2021-09-08.
How severe is CVE-2021-40797?: Medium severity. CVSS v3 base score is 6.5 out of 10.