CVE-2023-3966

2024-02-2213:15:07

Alpine Linux Development Team

security.alpinelinux.org

open vswitch

denial of service

geneve packets

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.1%

JSON

A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is enabled.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchopenvswitch< 2.17.9-r0UNKNOWN
Alpine3.19-communitynoarchopenvswitch< 2.17.9-r0UNKNOWN
Alpine3.20-communitynoarchopenvswitch< 2.17.9-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	openvswitch	< 2.17.9-r0	UNKNOWN
Alpine	3.19-community	noarch	openvswitch	< 2.17.9-r0	UNKNOWN
Alpine	3.20-community	noarch	openvswitch	< 2.17.9-r0	UNKNOWN