SUSE-SU-2021:0276-1 Security update for openvswitch

This update for openvswitch fixes the following issues: - openvswitch was updated to 2.11.5 - CVE-2020-27827: Fixed a memory leak when parsing lldp packets bsc1181345...

SUSE SLED15 / SLES15 Security Update : openvswitch (SUSE-SU-2021:0258-1)

This update for openvswitch fixes the following issues : openvswitch was updated to 2.13.2 CVE-2020-27827: Fixed a memory leak when parsing lldp packets bsc1181345 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable ha...

SUSE-SU-2021:0258-1 Security update for openvswitch

This update for openvswitch fixes the following issues: - openvswitch was updated to 2.13.2 - CVE-2020-27827: Fixed a memory leak when parsing lldp packets bsc1181345...

Debian DSA-4836-1 : openvswitch - security update

Two vulnerabilities were discovered in the LLPD implementation of Open vSwitch, a software-based Ethernet virtual switch, which could result in denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

Debian: Security Advisory (DSA-4836-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 4836-1] openvswitch security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4836-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 22, 2021 https://www.debian.org/security/faq -...

DSA-4836-1 openvswitch - security update

Bulletin has no description...

[ASA-202101-28] openvswitch: multiple issues

Arch Linux Security Advisory ASA-202101-28 ========================================== Severity: Medium Date : 2021-01-20 CVE-ID : CVE-2015-8011 CVE-2020-27827 Package : openvswitch Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1456 Summary ======= The package...

Ubuntu: Security Advisory (USN-4691-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

lldpd Resource Management Error Vulnerability

lldpd is a daemon that can receive and send LLDP frames. A resource management error vulnerability exists in the Ubuntu lldpd software, which can be exploited by attackers to trigger a denial of service attack. The following products and models are affected: Ubuntu 20.10 openvswitch-common,Ubuntu...

CVE-2020-27827

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Bug Fix Advisory: openvswitch2.11 bug fix and enhancement update

An update for openvswitch2.11 is now available in Fast Datapath for Red Hat Enterprise Linux 8. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. Bug Fixes and Enhancements: 20.I RHEL-8 Fast Datapath Release...

Important: Red Hat Bug Fix Advisory: openvswitch2.11 bug fix and enhancement update

An update for openvswitch2.11 is now available in Fast Datapath for Red Hat Enterprise Linux 7. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. Bug Fixes and Enhancements: OVS build is broken due to kernel...

Important: Red Hat Bug Fix Advisory: openvswitch2.13 bug fix and enhancement update

An update for openvswitch2.13 is now available in Fast Datapath for Red Hat Enterprise Linux 7. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. Bug Fixes and Enhancements: 20.I RHEL-7 Fast Datapath Release...

openvswitch:odp_target: Heap-buffer-overflow in format_generic_odp_key

Project: https://github.com/openvswitch/ovs.git Detailed Report: https://oss-fuzz.com/testcase?key=4677720264671232 Project: openvswitch Fuzzing Engine: libFuzzer Fuzz Target: odptarget Job Type: libfuzzerasanopenvswitch Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

openvswitch:odp_target: Heap-buffer-overflow in get_32aligned_be64

Project: https://github.com/openvswitch/ovs.git Detailed Report: https://oss-fuzz.com/testcase?key=5663078959808512 Project: openvswitch Fuzzing Engine: libFuzzer Fuzz Target: odptarget Job Type: libfuzzerasanopenvswitch Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

RHEL 7 : Red Hat Virtualization (RHSA-2020:4114)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4114 advisory. ovirt-ansible-repositories is an Ansible role used to set up the repositories required for oVirt engine or host installation. The openvswitc...

Moderate: Red Hat Security Advisory: Red Hat Virtualization security and bug fix update

An update for openvswitch2.11, ovirt-ansible-repositories, ovn2.11, and python-ovirt-engine-sdk4 is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7 and Red Hat Virtualization Engine 4.3. Red Hat Product Security has rated this update as having a security impact of...

PT-2020-5836

Name of the Vulnerable Software and Affected Versions: OpenvSwitch versions affected versions not specified Description: A flaw was found in OpenvSwitch related to the implementation of the LLDP protocol. Specially crafted LLDP packets can cause memory loss when allocating data to handle specific...