RHEL 7 : openvswitch2.13 (RHSA-2021:0835)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0835 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic...

Open vSwitch Resource Consumption DoS

The vulnerability of the Open vSwitch switch’s microprogramming software is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions using a specially crafted package...

CVE-2021-20267

A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the IPv6 addresses of other systems on the network, resulting in denial of service or in some...

[SECURITY] Fedora 33 Update: openvswitch-2.15.0-1.fc33

Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic...

PT-2021-7727

Name of the Vulnerable Software and Affected Versions Open vSwitch versions 2.11.0 through 2.15.0 Description The issue is related to a use-after-free error in the decode NXAST RAW ENCAP function of Open vSwitch. This error occurs during the decoding of a RAW ENCAP action and can be exploited by ...

lldp/openvswitch: denial of service via externally triggered memory leak

A flaw was found in multiple versions of Open vSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability...

openvswitch: limitation in the OVS packet parsing in userspace leads to DoS

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this...

CVE-2020-35498

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this...

USN-4729-1: Open vSwitch vulnerability

Joakim Hindersson discovered that Open vSwitch incorrectly parsed certain network packets. A remote attacker could use this issue to cause a denial of service, or possibly alter packet classification...

USN-4729-1 openvswitch vulnerability

Joakim Hindersson discovered that Open vSwitch incorrectly parsed certain network packets. A remote attacker could use this issue to cause a denial of service, or possibly alter packet classification...

PT-2021-2225 · Unknown +4 · Openvswitch +4

Name of the Vulnerable Software and Affected Versions: openvswitch affected versions not specified Description: A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet, causing the resulting megaflow in the kernel to be too wide...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Open vSwitch vulnerability (USN-4729-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4729-1 advisory. Joakim Hindersson discovered that Open vSwitch incorrectly parsed certain network packets. A remote attacker could use this issue to cause...

UBUNTU-CVE-2020-35498

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this...

CVE-2020-27827

A flaw was found in multiple versions of Open vSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Open vSwitch vulnerabilities (USN-4691-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4691-1 advisory. Jonas Rudloff discovered that Open vSwitch incorrectly handled certain malformed LLDP packets. A remote attacker could use this...

USN-4691-1: Open vSwitch vulnerabilities

Jonas Rudloff discovered that Open vSwitch incorrectly handled certain malformed LLDP packets. A remote attacker could use this issue to cause Open vSwitch to crash, resulting in a denial of service, or possibly execute arbitrary code...

USN-4691-1 openvswitch vulnerabilities

Jonas Rudloff discovered that Open vSwitch incorrectly handled certain malformed LLDP packets. A remote attacker could use this issue to cause Open vSwitch to crash, resulting in a denial of service, or possibly execute arbitrary code...

UBUNTU-CVE-2020-27827

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability...

openvswitch:ofp_print_target: Heap-use-after-free in decode_NXAST_RAW_ENCAP

Project: https://github.com/openvswitch/ovs.git Detailed Report: https://oss-fuzz.com/testcase?key=6540965472632832 Project: openvswitch Fuzzing Engine: libFuzzer Fuzz Target: ofpprinttarget Job Type: libfuzzerasanopenvswitch Platform Id: linux Crash Type: Heap-use-after-free WRITE 2 Crash Addres...

openvswitch:odp_target: Crash in nl_attr_is_valid

Detailed Report: https://oss-fuzz.com/testcase?key=4861153154170880 Project: openvswitch Fuzzing Engine: libFuzzer Fuzz Target: odptarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x731000043e28 Crash State: nlattrisvalid odpnshhdrfromattr...