Lucene search

K
redosRedosROS-20240422-08
HistoryApr 22, 2024 - 12:00 a.m.

ROS-20240422-08

2024-04-2200:00:00
redos.red-soft.ru
5
open vswitch
tc flower packet
denial of service
remote attackers
geneve packet metadata

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

A vulnerability in the TC flower packet management filter of the software-defined multi-tiered
Open vSwitch (OvS) switch is related to flaws in the handling of exceptional states resulting from an incorrect validation of Geneve packet metadata.
incorrect validation of Geneve packet metadata. Exploitation of the vulnerability could allow an attacker,
acting remotely to cause a denial of service, provided that other_config:hw-offload=true

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64openvswitch<= 3.1.1-2UNKNOWN

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%