Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2020-27827
HistoryMar 18, 2021 - 5:15 p.m.

CVE-2020-27827

2021-03-1817:15:13
CWE-400
[email protected]
web.nvd.nist.gov
371
3
openvswitch
dos
cve-2020-27827
lldp
nvd

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.2

Confidence

High

EPSS

0.006

Percentile

78.3%

JSON

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Affected configurations

Vulners
NVD
Node
openvswitchopenvswitchRange≤1.0.8
OR
openvswitchopenvswitchRange≤2.14.1
OR
openvswitchopenvswitchRange≤2.13.2
OR
openvswitchopenvswitchRange≤2.12.2
OR
openvswitchopenvswitchRange≤2.11.5
OR
openvswitchopenvswitchRange≤2.10.6
OR
openvswitchopenvswitchRange≤2.9.8
OR
openvswitchopenvswitchRange≤2.8.10
OR
openvswitchopenvswitchRange≤2.7.12
OR
openvswitchopenvswitchRange≤2.6.9
VendorProductVersionCPE
openvswitchopenvswitch*cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*
openvswitchopenvswitch*cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*
openvswitchopenvswitch*cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*
openvswitchopenvswitch*cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*
openvswitchopenvswitch*cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*
openvswitchopenvswitch*cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*
openvswitchopenvswitch*cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*
openvswitchopenvswitch*cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*
openvswitchopenvswitch*cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*
openvswitchopenvswitch*cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "lldp/openvswitch",
    "versions": [
      {
        "version": "lldpd 1.0.8, openvswitch 2.14.1, openvswitch 2.13.2, openvswitch 2.12.2, openvswitch 2.11.5, openvswitch 2.10.6, openvswitch 2.9.8, openvswitch 2.8.10, openvswitch 2.7.12, openvswitch 2.6.9",
        "status": "affected"
      }
    ]
  }
]

Social References

More

Related

nvd 1
redhat 10
debiancve 1
openvas 17
alpinelinux 1
veracode 1
photon 8
suse 1
nessus 34
cbl_mariner 3
prion 1
cvelist 1
ubuntucve 1
redhatcve 1
osv 5
archlinux 2
fedora 5
debian 4
ics 1
ubuntu 1
gentoo 1
nvd
nvd
CVE-2020-27827
2021-03-18 17:15:13
redhat
redhat
(RHSA-2021:0976) Moderate: Red Hat Virtualization Host security, bug fix and enhancement update (4.4.4-2)
2021-03-23 18:36:22
(RHSA-2021:1051) Moderate: RHV-H enhancement and security update (redhat-virtualization-host) 4.3.14
2021-03-31 12:24:54
(RHSA-2021:0834) Moderate: openvswitch2.11 security update
2021-03-15 14:20:36
debiancve
debiancve
CVE-2020-27827
2021-03-18 17:15:13
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:0277-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:0284-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:0300-1)
2021-04-19 00:00:00
alpinelinux
alpinelinux
CVE-2020-27827
2021-03-18 17:15:13
veracode
veracode
Denial Of Service (DoS)
2021-01-14 16:37:28
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0335
2021-04-07 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-1.0-0381
2021-04-16 00:00:00
Important Photon OS Security Update - PHSA-2021-0335
2021-04-07 00:00:00
suse
suse
Security update for openvswitch (important)
2021-02-05 00:00:00
nessus
nessus
Photon OS 1.0: Openvswitch PHSA-2021-1.0-0381
2021-04-20 00:00:00
SUSE SLED15 / SLES15 Security Update : openvswitch (SUSE-SU-2021:0300-1)
2021-02-04 00:00:00
SUSE SLES12 Security Update : openvswitch (SUSE-SU-2021:0298-1)
2021-02-04 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-27827 affecting package lldpd for versions less than 1.0.14-1
2022-08-31 06:17:55
CVE-2020-27827 affecting package lldpd 1.0.4-3
2024-07-26 21:09:36
CVE-2020-27827 affecting package openvswitch 2.12.0-3
2021-05-06 23:56:49
prion
prion
Denial of service
2021-03-18 17:15:00
cvelist
cvelist
CVE-2020-27827
2021-03-18 00:00:00
ubuntucve
ubuntucve
CVE-2020-27827
2021-01-13 00:00:00
redhatcve
redhatcve
CVE-2020-27827
2021-01-28 02:24:31
osv
osv
CVE-2020-27827
2021-03-18 17:15:13
lldpd - security update
2023-04-10 00:00:00
openvswitch vulnerabilities
2021-01-13 17:15:51
archlinux
archlinux
[ASA-202101-29] lldpd: information disclosure
2021-01-20 00:00:00
[ASA-202101-28] openvswitch: multiple issues
2021-01-20 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: lldpd-1.0.16-1.fc36
2023-04-20 05:24:35
[SECURITY] Fedora 37 Update: lldpd-1.0.16-1.fc37
2023-04-20 02:54:39
[SECURITY] Fedora 38 Update: lldpd-1.0.16-1.fc38
2023-04-19 01:40:28
debian
debian
[SECURITY] [DLA 3389-1] lldpd security update
2023-04-12 15:17:27
[SECURITY] [DLA 3388-1] lldpd security update
2023-04-10 17:00:01
[SECURITY] [DSA 4836-1] openvswitch security update
2021-01-22 18:52:14
ics
ics
Siemens Industrial Products LLDP (Update D)
2022-08-18 12:00:00
ubuntu
ubuntu
Open vSwitch vulnerabilities
2021-01-13 00:00:00
gentoo
gentoo
Open vSwitch: Multiple Vulnerabilities
2023-11-26 00:00:00

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.2

Confidence

High

EPSS

0.006

Percentile

78.3%

JSON
Related for CVE-2020-27827
nvd1redhat10debiancve1openvas17alpinelinux1veracode1photon8suse1nessus34cbl_mariner3prion1cvelist1ubuntucve1redhatcve1osv5archlinux2fedora5debian4ics1ubuntu1gentoo1