Lucene search

K
redhatRedHatRHSA-2024:1391
HistoryMar 19, 2024 - 3:22 p.m.

(RHSA-2024:1391) Important: ovn23.06 security update

2024-03-1915:22:12
access.redhat.com
4
ovn
open virtual network
virtual network
abstraction
ovs
overlays
security groups
bfd packets
denial of service
cve-2024-2182

7.2 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

OVN, the Open Virtual Network, is a system to support virtual network
abstraction. OVN complements the existing capabilities of OVS to add
native support for virtual network abstractions, such as virtual L2 and L3
overlays and security groups.

Security fix(es):

  • ovn23.06: insufficient validation of BFD packets may lead to denial of service (CVE-2024-2182)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

7.2 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%