Lucene search
+L

1251 matches found

RedHat Linux
RedHat Linux
added 2024/03/07 6:20 p.m.14 views

openvswitch: openvswitch don't match packets on nd_target field

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to...

7.1CVSS7.4AI score0.00389EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/03/07 6:20 p.m.45 views

Important: Red Hat Security Advisory: openvswitch2.17 security update

An update for openvswitch2.17 is now available for Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.5CVSS6.8AI score0.01033EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2024/03/04 12:00 a.m.21 views

openSUSE: Security Advisory for openvswitch (SUSE-SU-2023:2250-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.7AI score0.01324EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/03/04 12:00 a.m.17 views

openSUSE: Security Advisory for openvswitch (SUSE-SU-2023:4508-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS6.4AI score0.00389EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/03/04 12:00 a.m.17 views

openSUSE Security Advisory (SUSE-SU-2024:0553-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.00568EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2024/02/29 3:56 a.m.15 views

SUSE CVE-2021-46955

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernels built with KASAN, it's possible to see the following splat while testing fragmentation of IPv4 packets: BUG: KASAN: stack-out-of-bounds...

7.5CVSS6.3AI score0.0074EPSS
SaveExploits0References65
RedhatCVE
RedhatCVE
added 2024/02/28 3:34 a.m.36 views

CVE-2021-46955

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernels built with KASAN, it's possible to see the following splat while testing fragmentation of IPv4 packets: BUG: KASAN: stack-out-of-bounds...

5.3CVSS6.4AI score0.0074EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2024/02/27 7:04 p.m.12 views

CVE-2021-46955

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernels built with KASAN, it's possible to see the following splat while testing fragmentation of IPv4 packets: BUG: KASAN: stack-out-of-bounds...

7.1CVSS6.2AI score0.0074EPSS
SaveExploits0References10Affected Software1
OSV
OSV
added 2024/02/27 7:04 p.m.5 views

DEBIAN-CVE-2021-46955

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernels built with KASAN, it's possible to see the following splat while testing fragmentation of IPv4 packets: BUG: KASAN: stack-out-of-bounds...

7.1CVSS5.6AI score0.0074EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/27 7:04 p.m.14 views

CVE-2021-46955

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernels built with KASAN, it's possible to see the following splat while testing fragmentation of IPv4 packets: BUG: KASAN: stack-out-of-bounds...

7.1CVSS7.5AI score
SaveExploits0References9
NVD
NVD
added 2024/02/27 7:04 p.m.30 views

CVE-2021-46955

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernels built with KASAN, it's possible to see the following splat while testing fragmentation of IPv4 packets: BUG: KASAN: stack-out-of-bounds...

8.2CVSS7.5AI score0.0074EPSS
SaveExploits0References9
OSV
OSV
added 2024/02/27 7:04 p.m.12 views

UBUNTU-CVE-2021-46955

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernels built with KASAN, it's possible to see the following splat while testing fragmentation of IPv4 packets: BUG: KASAN: stack-out-of-bounds...

8.2CVSS6.1AI score0.0074EPSS
SaveExploits0References13
Prion
Prion
added 2024/02/27 7:04 p.m.31 views

Design/Logic Flaw

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernels built with KASAN, it's possible to see the following splat while testing fragmentation of IPv4 packets: BUG: KASAN: stack-out-of-bounds...

7AI score0.0074EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
added 2024/02/27 7:04 p.m.40 views

CVE-2021-46955

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernels built with KASAN, it's possible to see the following splat while testing fragmentation of IPv4 packets: BUG: KASAN: stack-out-of-bounds...

8.2CVSS6.3AI score0.0074EPSS
SaveExploits0References12
CVE
CVE
added 2024/02/27 6:46 p.m.6421 views

CVE-2021-46955

CVE-2021-46955 affects the Linux kernel in combination with Open vSwitch. The issue arises in IPv4 packet fragmentation within ovs_fragment(), where a temporary dst_entry is misused as an rtable pointer during the ip_do_fragment() -> ip_skb_dst_mtu() -> ip_dst_mtu_maybe_forward() -> ip_m...

8.2CVSS6.1AI score0.0074EPSS
SaveExploits0References9Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/27 6:46 p.m.25 views

CVE-2021-46955 openvswitch: fix stack OOB read while fragmenting IPv4 packets

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernels built with KASAN, it's possible to see the following splat while testing fragmentation of IPv4 packets: BUG: KASAN: stack-out-of-bounds...

8.2CVSS7AI score0.0074EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2024/02/27 6:46 p.m.38 views

CVE-2021-46955 openvswitch: fix stack OOB read while fragmenting IPv4 packets

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernels built with KASAN, it's possible to see the following splat while testing fragmentation of IPv4 packets: BUG: KASAN: stack-out-of-bounds...

8.2CVSS7.6AI score0.0074EPSS
SaveExploits0References9
Debian CVE
Debian CVE
added 2024/02/27 6:46 p.m.29 views

CVE-2021-46955

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernels built with KASAN, it's possible to see the following splat while testing fragmentation of IPv4 packets: BUG: KASAN: stack-out-of-bounds...

8.2CVSS7.2AI score0.0074EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/02/27 12:00 a.m.30 views

SUSE SLES15 Security Update : openvswitch (SUSE-SU-2024:0462-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:0462-1 advisory. - CVE-2024-22563: Fixed memory leak via the function xmalloc in /lib/util.c bsc1219059. Tenable has extracted the preceding description block directly...

7.5CVSS7.1AI score0.00568EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
added 2024/02/22 8:00 a.m.8 views

Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet

...

7.5CVSS6.5AI score0.01033EPSS
SaveExploits0
Rows per page
Query Builder