(RHSA-2024:1387) Important: ovn22.03 security update

2024-03-1915:21:16

access.redhat.com

ovn

virtual network

security fix

denial of service

cve-2024-2182

cvss score

references

unix

6.6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

OVN, the Open Virtual Network, is a system to support virtual network
abstraction. OVN complements the existing capabilities of OVS to add
native support for virtual network abstractions, such as virtual L2 and L3
overlays and security groups.

Security fix(es):

ovn22.03: insufficient validation of BFD packets may lead to denial of service (CVE-2024-2182)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8aarch64ovn22.03-debugsource< 22.03.3-71.el8fdpovn22.03-debugsource-22.03.3-71.el8fdp.aarch64.rpm
RedHat8s390xovn22.03-host-debuginfo< 22.03.3-71.el8fdpovn22.03-host-debuginfo-22.03.3-71.el8fdp.s390x.rpm
RedHat8ppc64leovn22.03< 22.03.3-71.el8fdpovn22.03-22.03.3-71.el8fdp.ppc64le.rpm
RedHat8s390xovn22.03-central-debuginfo< 22.03.3-71.el8fdpovn22.03-central-debuginfo-22.03.3-71.el8fdp.s390x.rpm
RedHat8s390xovn22.03-vtep< 22.03.3-71.el8fdpovn22.03-vtep-22.03.3-71.el8fdp.s390x.rpm
RedHat8ppc64leovn22.03-debugsource< 22.03.3-71.el8fdpovn22.03-debugsource-22.03.3-71.el8fdp.ppc64le.rpm
RedHat8x86_64ovn22.03-central-debuginfo< 22.03.3-71.el8fdpovn22.03-central-debuginfo-22.03.3-71.el8fdp.x86_64.rpm
RedHat8aarch64ovn22.03-debuginfo< 22.03.3-71.el8fdpovn22.03-debuginfo-22.03.3-71.el8fdp.aarch64.rpm
RedHat8x86_64ovn22.03-debugsource< 22.03.3-71.el8fdpovn22.03-debugsource-22.03.3-71.el8fdp.x86_64.rpm
RedHat8s390xovn22.03-debugsource< 22.03.3-71.el8fdpovn22.03-debugsource-22.03.3-71.el8fdp.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	aarch64	ovn22.03-debugsource	< 22.03.3-71.el8fdp	ovn22.03-debugsource-22.03.3-71.el8fdp.aarch64.rpm
RedHat	8	s390x	ovn22.03-host-debuginfo	< 22.03.3-71.el8fdp	ovn22.03-host-debuginfo-22.03.3-71.el8fdp.s390x.rpm
RedHat	8	ppc64le	ovn22.03	< 22.03.3-71.el8fdp	ovn22.03-22.03.3-71.el8fdp.ppc64le.rpm
RedHat	8	s390x	ovn22.03-central-debuginfo	< 22.03.3-71.el8fdp	ovn22.03-central-debuginfo-22.03.3-71.el8fdp.s390x.rpm
RedHat	8	s390x	ovn22.03-vtep	< 22.03.3-71.el8fdp	ovn22.03-vtep-22.03.3-71.el8fdp.s390x.rpm
RedHat	8	ppc64le	ovn22.03-debugsource	< 22.03.3-71.el8fdp	ovn22.03-debugsource-22.03.3-71.el8fdp.ppc64le.rpm
RedHat	8	x86_64	ovn22.03-central-debuginfo	< 22.03.3-71.el8fdp	ovn22.03-central-debuginfo-22.03.3-71.el8fdp.x86_64.rpm
RedHat	8	aarch64	ovn22.03-debuginfo	< 22.03.3-71.el8fdp	ovn22.03-debuginfo-22.03.3-71.el8fdp.aarch64.rpm
RedHat	8	x86_64	ovn22.03-debugsource	< 22.03.3-71.el8fdp	ovn22.03-debugsource-22.03.3-71.el8fdp.x86_64.rpm
RedHat	8	s390x	ovn22.03-debugsource	< 22.03.3-71.el8fdp	ovn22.03-debugsource-22.03.3-71.el8fdp.s390x.rpm