CVE-2024-1151

CVE-2024-1151 is described in connected sources as a Linux kernel vulnerability affecting the Open vSwitch (OVS) sub‑component. The flaw occurs when a recursive operation calls into the same code block without validating stack depth, allowing a stack overflow that can crash the kernel or cause re...

CVE-2024-1151 Kernel: stack overflow problem in open vswitch kernel module leading to dos

A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block. The OVS module does not validate the stack depth, pushing too many frames and causing a stack overflow. As a result,...

CVE-2024-1151: Stack-based Buffer Overflow

A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block. The OVS module does not validate the stack depth, pushing too many frames and causing a stack overflow. As a result,...

CVE-2023-3966

A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is enabled...

UBUNTU-CVE-2023-3966

A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is enabled...

CVE-2023-3966

A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is enabled...

Open vSwitch Security Vulnerabilities

Open vSwitch is an open source virtual switch. A security vulnerability exists in Open vSwitch. An attacker exploited the vulnerability to cause a denial of service and invalid memory access...

PT-2024-1810

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The issue is related to an uncontrolled recursion in the Open vSwitch component of the Linux Kernel. This occurs when a recursive operation of code push recursively calls into the code...

Linux Kernel Security Vulnerabilities

Linux kernel is an open source operating system from the Linux Foundation in the United States. Linux kernel Open vSwitch suffers from a stack overflow vulnerability that can be exploited by a local attacker to submit a special request that can crash the system and cause a denial of service attac...

SUSE CVE-2024-22563

openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc in openvswitch-2.17.8/lib/util.c...

DEBIAN-CVE-2024-22563

openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc in openvswitch-2.17.8/lib/util.c...

UBUNTU-CVE-2024-22563

openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc in openvswitch-2.17.8/lib/util.c...

Open vSwitch Security Vulnerabilities

Open vSwitch is an open source virtual switch. A security vulnerability exists in Open vSwitch version 2.17.8, which stems from the discovery of a contained memory leak via the xmalloc function in openvswitch-2.17.8/lib/util.c. The vulnerability is caused by the use of the xmalloc function in...

PT-2024-2771 · Unknown +4 · Openvswitch +4

Name of the Vulnerable Software and Affected Versions: openvswitch version 2.17.8 Description: The issue is related to a memory leak in the xmalloc function in openvswitch-2.17.8/lib/util.c. This memory leak is associated with errors in memory release. Exploitation of this issue may allow a remot...

SUSE SLES15: libopenvswitch-2_14-0 / libovn-20_06-0 / openvswitch / etc (SUSE-SU-2023:4661-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4661-1 advisory. - CVE-2023-5366: Fixed missing masks on a final stage with ports trie bsc1216002. Tenable has extracted the preceding...

SUSE SLES15: libopenvswitch-2_14-0 / libovn-20_06-0 / openvswitch / etc (SUSE-SU-2023:4573-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4573-1 advisory. - CVE-2023-5366: Fixed missing masks on a final stage with ports trie bsc1216002. Tenable has extracted the preceding...

Virtuozzo Hybrid Infrastructure 6.0 (6.0.0-243)

In this release, Virtuozzo Hybrid Infrastructure provides an upgrade of the Linux distribution, kernel, and toolset packages. This release also contains a range of new features that cover storage performance, object storage, as well as monitoring and alerts. Additionally, this release delivers...

USN-6514-1: Open vSwitch vulnerability

It was discovered that Open vSwitch did not correctly handle OpenFlow rules for ICMPv6 Neighbour Advertisement packets. A local attacker could possibly use this issue to redirect traffic to arbitrary IP addresses...

USN-6514-1 openvswitch vulnerability

It was discovered that Open vSwitch did not correctly handle OpenFlow rules for ICMPv6 Neighbour Advertisement packets. A local attacker could possibly use this issue to redirect traffic to arbitrary IP addresses...

Ubuntu 18.04 ESM / 20.04 LTS : Open vSwitch vulnerability (USN-6514-1)

The remote Ubuntu 18.04 ESM / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6514-1 advisory. It was discovered that Open vSwitch did not correctly handle OpenFlow rules for ICMPv6 Neighbour Advertisement packets. A local attacker could possibl...