Lucene search

K
osvGoogleOSV:USN-6690-1
HistoryMar 12, 2024 - 11:34 a.m.

openvswitch vulnerabilities

2024-03-1211:34:51
Google
osv.dev
7
open vswitch
geneve packets
hardware offloading
netlink path
denial of service
icmpv6
neighbor advertisement
remote attacker
arbitrary ip addresses
software

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.1%

Timothy Redaelli and Haresh Khandelwal discovered that Open vSwitch
incorrectly handled certain crafted Geneve packets when hardware offloading
via the netlink path is enabled. A remote attacker could possibly use this
issue to cause Open vSwitch to crash, leading to a denial of service.
(CVE-2023-3966)

It was discovered that Open vSwitch incorrectly handled certain ICMPv6
Neighbor Advertisement packets. A remote attacker could possibly use this
issue to redirect traffic to arbitrary IP addresses. (CVE-2023-5366)