K000139922: Open vSwitch vulnerabilities CVE-2023-3966 and CVE-2023-5366

🗓️ 06 Jun 2024 01:49:50Reported by f5Type

f5🔗 my.f5.com👁 34 Views

Open vSwitch vulnerabilities CVE-2023-3966 and CVE-2023-5366. Flaws in handling Geneve packets and ICMPv6 Neighbor Advertisement packets

Reporter	Title	Published	Views	Family All 166
ATTACKERKB	CVE-2023-5366	6 Oct 202318:15	–	attackerkb
ATTACKERKB	CVE-2023-3966	22 Feb 202413:15	–	attackerkb
AlpineLinux	CVE-2023-3966	22 Feb 202412:15	–	alpinelinux
AlpineLinux	CVE-2023-5366	6 Oct 202317:43	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в openvswitch	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux - уязвимость в openvswitch	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the packet-filtering filter in TC Flower software for multi-level switches like Open vSwitch (OvS) allows a hacker to cause a service failure.	15 Feb 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Open vSwitch (OvS) multi-level switch lies in insufficient data authentication, which allows attackers to redirect ICMPv6 traffic to arbitrary IP addresses.	25 Apr 202400:00	–	bdu_fstec
CBLMariner	CVE-2023-5366 affecting package openvswitch for versions less than 2.17.9-1	6 Jun 202419:53	–	cbl_mariner
CBLMariner	CVE-2023-3966 affecting package openvswitch for versions less than 2.17.9-1	6 Jun 202419:53	–	cbl_mariner

06 Jun 2024 01:49Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.17.5

EPSS0.00045

SSVC