CVE-2020-35498

2021-02-1100:00:00

CWE-400

redhat

www.cve.org

vulnerability

openvswitch

denial of service

AI Score

7.1

Confidence

High

EPSS

0.004

Percentile

72.2%

JSON

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "openvswitch",
    "versions": [
      {
        "version": "openvswitch 2.5.12, openvswitch 2.6.10, openvswitch 2.7.13, openvswitch 2.8.11, openvswitch 2.9.9, openvswitch 2.10.7, openvswitch 2.11.6, openvswitch 2.12.3, openvswitch 2.13.3, openvswitch 2.14.2",
        "status": "affected"
      }
    ]
  }
]