Lucene search

K
cvelistRedhatCVELIST:CVE-2023-3966
HistoryFeb 22, 2024 - 12:15 p.m.

CVE-2023-3966 Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet

2024-02-2212:15:53
CWE-248
redhat
raw.githubusercontent.com
1
openvswitch
vulnerability
failure
recovery
malformed packet
geneve
denial of service
memory accesses
hardware offloading
netlink path

5.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.6%

A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is enabled.

5.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.6%