Lucene search
K

789 matches found

Prion
Prion
added 2021/07/20 7:15 a.m.27 views

Design/Logic Flaw

Open vSwitch aka openvswitch 2.11.0 through 2.15.0 has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...

4.3CVSS5.6AI score0.0008EPSS
Exploits0References9Affected Software1
UbuntuCve
UbuntuCve
added 2021/07/20 7:15 a.m.28 views

CVE-2021-36980

Open vSwitch aka openvswitch 2.11.0 through 2.15.0 has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...

5.5CVSS6.6AI score0.0008EPSS
Exploits0References3
OSV
OSV
added 2021/07/20 7:15 a.m.1 views

UBUNTU-CVE-2021-36980

Open vSwitch aka openvswitch 2.11.0 through 2.15.0 has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...

5.5CVSS7.3AI score0.0008EPSS
Exploits0References4
Cvelist
Cvelist
added 2021/07/20 12:0 a.m.19 views

CVE-2021-36980

Open vSwitch aka openvswitch 2.11.0 through 2.15.0 has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...

6AI score0.0008EPSS
Exploits0References9
CVE
CVE
added 2021/07/20 12:0 a.m.163 views

CVE-2021-36980

CVE-2021-36980 affects Open vSwitch (openvswitch) versions 2.11.0 through 2.15.0, with a use-after-free in decode_NXAST_RAW_ENCAP during decoding of RAW_ENCAP actions. Affected components: Open vSwitch core handling of OPENFLOW NXT actions (decode of RAW_ENCAP). Reported impact in advisories indi...

5.5CVSS5.6AI score0.0008EPSS
Exploits0References9Affected Software1
AlpineLinux
AlpineLinux
added 2021/07/20 12:0 a.m.79 views

CVE-2021-36980

Open vSwitch aka openvswitch 2.11.0 through 2.15.0 has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...

5.5CVSS5.9AI score0.0008EPSS
Exploits0
Debian CVE
Debian CVE
added 2021/07/20 12:0 a.m.31 views

CVE-2021-36980

Open vSwitch aka openvswitch 2.11.0 through 2.15.0 has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...

5.5CVSS5.9AI score0.0008EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2021/07/20 12:0 a.m.7 views

CVE-2021-36980

Open vSwitch aka openvswitch 2.11.0 through 2.15.0 has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...

5.5AI score0.0008EPSS
Exploits0References9
CNNVD
CNNVD
added 2021/07/20 12:0 a.m.3 views

Open vSwitch 资源管理错误漏洞

Open vSwitch is an open source virtual switch. A resource management error vulnerability exists in Open vSwitch a.k.a. openvswitch versions 2.11.0 through 2.15.0, which stems from the fact that in decodeNXASTRAWENCAP invoked from ofpactdecode and ofpactsdecode there is during decoding the RAWENCA...

5.5CVSS6.4AI score0.0008EPSS
Exploits0References20
Tenable Nessus
Tenable Nessus
added 2021/06/17 12:0 a.m.43 views

RHEL 7 : Red Hat OpenStack Platform 13.0 (openvswitch2.11) (RHSA-2021:2456)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2456 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic...

7.8CVSS7.5AI score0.05687EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2021/06/16 10:59 a.m.2 views

openvswitch: limitation in the OVS packet parsing in userspace leads to DoS

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this...

7.8CVSS5.7AI score0.05687EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2021/06/02 2:32 p.m.117 views

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 10.0 (openvswitch) security update

An update for openvswitch is now available for Red Hat OpenStack Platform 10 Newton. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.8CVSS7.6AI score0.05555EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2021/06/02 12:0 a.m.38 views

RHEL 7 : Red Hat OpenStack Platform 10.0 (openvswitch) (RHSA-2021:2205)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2205 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. Security Fixe...

9.8CVSS8.5AI score0.05555EPSS
Exploits0References4
NVD
NVD
added 2021/05/28 7:15 p.m.17 views

CVE-2021-20267

A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the IPv6 addresses of other systems on the network, resulting in denial of service or in some...

7.1CVSS0.00126EPSS
Exploits0References2
OSV
OSV
added 2021/05/28 7:15 p.m.0 views

DEBIAN-CVE-2021-20267

A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the IPv6 addresses of other systems on the network, resulting in denial of service or in some...

7.1CVSS6.5AI score0.00126EPSS
Exploits0References1
OSV
OSV
added 2021/05/28 7:15 p.m.5 views

CVE-2021-20267

A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the IPv6 addresses of other systems on the network, resulting in denial of service or in some...

7.1CVSS6.9AI score
Exploits0References2
OSV
OSV
added 2021/05/28 7:15 p.m.25 views

PYSEC-2021-136

A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the IPv6 addresses of other systems on the network, resulting in denial of service or in some...

7.1CVSS3.6AI score0.00126EPSS
Exploits0References1
PyPA
PyPA
added 2021/05/28 7:15 p.m.4 views

PYSEC-2021-136

A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the IPv6 addresses of other systems on the network, resulting in denial of service or in some...

7.1CVSS6.6AI score0.00126EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2021/05/28 7:15 p.m.1 views

UBUNTU-CVE-2021-20267

A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the IPv6 addresses of other systems on the network, resulting in denial of service or in some...

7.1CVSS6.6AI score0.00126EPSS
Exploits0References4
Prion
Prion
added 2021/05/28 7:15 p.m.18 views

Design/Logic Flaw

A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the IPv6 addresses of other systems on the network, resulting in denial of service or in some...

5.5CVSS6.9AI score0.00126EPSS
Exploits0References2Affected Software2
Rows per page
Query Builder