Memory Leak in OpenStack Neutron Routes Middleware

CVE-2021-40797

What is CVE-2021-40797?

In OpenStack Neutron, an identified flaw in the routes middleware can be exploited by authenticated users through API requests targeting nonexistent controllers. This misuse leads to excessive memory consumption by the API worker, which adversely affects API performance and can potentially result in a denial of service. Appropriate measures or updates are recommended to mitigate this issue.

References