openSUSE 15 Security Update : openvswitch (SUSE-SU-2022:3096-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:3096-1 advisory. - CVE-2021-36980: Fixed a use-after-free issue during the decoding of a RAWENCAP action bsc1188524. Tenable has extracted the preceding description block...

RHEL 7 : openvswitch2.11 (RHSA-2021:3942)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:3942 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. Security Fixe...

Ubuntu 20.04 LTS : Open vSwitch vulnerability (USN-5065-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5065-1 advisory. It was discovered that Open vSwitch incorrectly handled decoding RAWENCAP actions. A remote attacker could use this issue to cause Open vSwitch to crash, resultin...

CVE-2021-36980

Open vSwitch aka openvswitch 2.11.0 through 2.15.0 has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...

CVE-2021-36980

Open vSwitch aka openvswitch 2.11.0 through 2.15.0 has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...

CVE-2021-36980

Open vSwitch aka openvswitch 2.11.0 through 2.15.0 has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...

[ASA-202107-40] openvswitch: arbitrary code execution

Arch Linux Security Advisory ASA-202107-40 ========================================== Severity: Medium Date : 2021-07-20 CVE-ID : CVE-2021-36980 Package : openvswitch Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-2177 Summary ======= The package openvswitch...

CVE-2021-36980

Open vSwitch aka openvswitch 2.11.0 through 2.15.0 has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...

OSV-2020-2197 Heap-use-after-free in decode_NXAST_RAW_ENCAP

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27851 Crash type: Heap-use-after-free WRITE 2 Crash state: decodeNXASTRAWENCAP ofpactdecode ofpactsdecode...