Lucene search
+L

1003 matches found

OSV
OSV
•added 2021/05/28 7:15 p.m.•22 views

UBUNTU-CVE-2021-20267

A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the IPv6 addresses of other systems on the network, resulting in denial of service or in some...

7.1CVSS6.6AI score0.01023EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2021/05/28 6:46 p.m.•48 views

CVE-2021-20267

A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the IPv6 addresses of other systems on the network, resulting in denial of service or in some...

8.2AI score0.01023EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2021/05/28 6:46 p.m.•94 views

CVE-2021-20267

A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the IPv6 addresses of other systems on the network, resulting in denial of service or in some...

7.1CVSS6.9AI score0.01023EPSS
SaveExploits0
CVE
CVE
•added 2021/05/28 6:46 p.m.•156 views

CVE-2021-20267

CVE-2021-20267 affects OpenStack Neutron when using the Open vSwitch driver. The flaw resides in Neutron’s default Open vSwitch firewall rules, allowing an attacker who controls a server instance connected to the virtual switch to impersonate other IPv6 addresses, potentially causing denial of se...

7.1CVSS7.2AI score0.01023EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/28 12:00 a.m.•3 views

CVE-2021-20267: Insufficient Verification of Data Authenticity

A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the IPv6 addresses of other systems on the network, resulting in denial of service or in some...

7.1CVSS5.7AI score0.01023EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/05/28 12:00 a.m.•11 views

OpenStack 数据伪造问题漏洞

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration NASA in collaboration with Rackspace in the United States. Openstack Neutron is vulnerable to a Data Forgery Issue vulnerability that stems from a flaw found in the default Open vSwitch...

7.1CVSS6.4AI score0.01023EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2021/05/20 7:33 p.m.•114 views

Important: Red Hat Security Advisory: openvswitch security update

An update for openvswitch is now available in Fast Datapath for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.8CVSS7.4AI score0.08026EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2021/05/20 7:33 p.m.•9 views

lldp/openvswitch: denial of service via externally triggered memory leak

A flaw was found in multiple versions of Open vSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability...

7.5CVSS7.2AI score0.03235EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/04/28 12:00 a.m.•14 views

PT-2021-8274

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.12.0-rc6+ Description The vulnerability is related to a stack out-of-bounds read in the ip do fragment function when fragmenting IPv4 packets. This occurs when the ovs fragment function uses a temporary struct...

8.2CVSS6.3AI score0.00746EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2021/04/12 9:21 p.m.•8 views

Moderate: Red Hat Bug Fix Advisory: openvswitch2.11 bug fix and enhancement update

An update for openvswitch2.11 is now available in Fast Datapath for Red Hat Enterprise Linux 8. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. Bug Fixes and Enhancements: Fast Datapath Release BZ1940249...

5.5CVSS6.7AI score0.0118EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/04/05 12:00 a.m.•13 views

The vulnerability of the LLDP protocol implementation under Unix, Lldpd, and the Open vSwitch software multi-level switch, is related to a flaw in the resource consumption control mechanism. This vulnerability allows a perpetrator to cause a service failure.

The vulnerability of the LLDP protocol implementation under Unix, Lldpd, and the Open vSwitch software multi-level switch, is related to a bug in the resource management mechanism. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.5CVSS7.5AI score0.03235EPSS
SaveExploits0References11Affected Software6
RedHat Linux
RedHat Linux
•added 2021/03/31 12:59 p.m.•8 views

lldp/openvswitch: denial of service via externally triggered memory leak

A flaw was found in multiple versions of Open vSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability...

7.5CVSS7.2AI score0.03235EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/03/31 12:59 p.m.•11 views

lldp/openvswitch: denial of service via externally triggered memory leak

A flaw was found in multiple versions of Open vSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability...

7.5CVSS7.2AI score0.03235EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/03/31 12:59 p.m.•13 views

openvswitch: limitation in the OVS packet parsing in userspace leads to DoS

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this...

7.8CVSS7.1AI score0.08026EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2021/03/31 12:00 a.m.•42 views

RHEL 7 : openvswitch2.11 (RHSA-2021:1050)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1050 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic...

7.8CVSS7.1AI score0.08026EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2021/03/23 6:53 p.m.•10 views

lldp/openvswitch: denial of service via externally triggered memory leak

A flaw was found in multiple versions of Open vSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability...

7.5CVSS7.2AI score0.03235EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2021/03/18 12:00 a.m.•3 views

CVE-2020-27827

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability...

7.2AI score0.03235EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2021/03/18 12:00 a.m.•44 views

RHEL 7 : openvswitch2.11 and ovn2.11 (RHSA-2021:0931)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0931 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. OVN,...

9.8CVSS6.9AI score0.05473EPSS
SaveExploits0References11
RedHat Linux
RedHat Linux
•added 2021/03/15 2:36 p.m.•14 views

lldp/openvswitch: denial of service via externally triggered memory leak

A flaw was found in multiple versions of Open vSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability...

7.5CVSS7.2AI score0.03235EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/03/15 2:36 p.m.•10 views

lldp/openvswitch: denial of service via externally triggered memory leak

A flaw was found in multiple versions of Open vSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability...

7.5CVSS7.2AI score0.03235EPSS
SaveExploits0References5
Rows per page
Query Builder