Lucene search
UbuntuUSN-6691-1HistoryMar 12, 2024 - 12:00 a.m.
OVN vulnerability
2024-03-1200:00:00
ubuntu.com
20
ovn
ubuntu
ovs bidirectional forwarding detection
logical ports
disruption of traffic
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
17.1%
Releases
- Ubuntu 23.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Packages
- ovn - system to support virtual network abstraction
Details
It was discovered that OVN incorrectly enabled OVS Bidirectional Forwarding
Detection on logical ports. A remote attacker could possibly use this issue
to disrupt traffic.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 23.10 | noarch | ovn-central | < 23.09.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | ovn-central-dbgsym | < 23.09.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | ovn-common | < 23.09.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | ovn-common-dbgsym | < 23.09.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | ovn-controller-vtep | < 23.09.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | ovn-controller-vtep-dbgsym | < 23.09.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | ovn-doc | < 23.09.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | ovn-docker | < 23.09.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | ovn-host | < 23.09.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | ovn-host-dbgsym | < 23.09.0-1ubuntu0.1 | UNKNOWN |
References
Related
nessus
nessus
RHEL 8 : ovn23.03 (RHSA-2024:1388)
2024-03-19 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : OVN vulnerability (USN-6691-1)
2024-03-12 00:00:00
Fedora 40 : ovn (2024-bf29e92de4)
2024-04-29 00:00:00
redhat
redhat
(RHSA-2024:1386) Important: ovn22.12 security update
2024-03-19 15:21:09
(RHSA-2024:1393) Important: ovn22.03 security update
2024-03-19 15:22:24
(RHSA-2024:1394) Important: ovn23.03 security update
2024-03-19 15:22:30
ubuntucve
ubuntucve
CVE-2024-2182
2024-03-12 00:00:00
cve
cve
CVE-2024-2182
2024-03-12 17:15:59
fedora
fedora
[SECURITY] Fedora 39 Update: ovn-23.09.0-139.fc39
2024-03-22 01:16:27
[SECURITY] Fedora 40 Update: ovn-23.09.0-139.fc40
2024-03-23 00:52:02
[SECURITY] Fedora 38 Update: ovn-23.09.0-139.fc38
2024-03-22 01:42:20
redhatcve
redhatcve
CVE-2024-2182
2024-03-12 15:46:39
openvas
openvas
Fedora: Security Advisory (FEDORA-2024-bf29e92de4)
2024-03-25 00:00:00
Ubuntu: Security Advisory (USN-6691-1)
2024-03-13 00:00:00
Fedora: Security Advisory (FEDORA-2024-082155d6b7)
2024-03-25 00:00:00
prion
prion
Design/Logic Flaw
2024-03-12 17:15:00
vulnrichment
vulnrichment
cvelist
cvelist
debiancve
debiancve
CVE-2024-2182
2024-03-12 17:15:59
nvd
nvd
CVE-2024-2182
2024-03-12 17:15:59
osv
osv
ovn vulnerability
2024-03-12 14:18:08
photon
photon
Important Photon OS Security Update - PHSA-2024-3.0-0738
2024-03-19 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
17.1%
Related for USN-6691-1