Lucene search
UbuntuUSN-6691-1HistoryMar 12, 2024 - 12:00 a.m.
OVN vulnerability
2024-03-1200:00:00
ubuntu.com
13
ovn
ubuntu
ovs bidirectional forwarding detection
logical ports
disruption of traffic
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
7.2 High
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
17.1%
Releases
- Ubuntu 23.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Packages
- ovn - system to support virtual network abstraction
Details
It was discovered that OVN incorrectly enabled OVS Bidirectional Forwarding
Detection on logical ports. A remote attacker could possibly use this issue
to disrupt traffic.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 23.10 | noarch | ovn-central | < 23.09.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | ovn-central-dbgsym | < 23.09.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | ovn-common | < 23.09.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | ovn-common-dbgsym | < 23.09.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | ovn-controller-vtep | < 23.09.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | ovn-controller-vtep-dbgsym | < 23.09.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | ovn-doc | < 23.09.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | ovn-docker | < 23.09.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | ovn-host | < 23.09.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | ovn-host-dbgsym | < 23.09.0-1ubuntu0.1 | UNKNOWN |
References
Related
redhat
redhat
(RHSA-2024:1391) Important: ovn23.06 security update
2024-03-19 15:22:12
(RHSA-2024:1387) Important: ovn22.03 security update
2024-03-19 15:21:16
(RHSA-2024:1394) Important: ovn23.03 security update
2024-03-19 15:22:30
fedora
fedora
[SECURITY] Fedora 39 Update: ovn-23.09.0-139.fc39
2024-03-22 01:16:27
[SECURITY] Fedora 40 Update: ovn-23.09.0-139.fc40
2024-03-23 00:52:02
[SECURITY] Fedora 38 Update: ovn-23.09.0-139.fc38
2024-03-22 01:42:20
openvas
openvas
Fedora: Security Advisory for ovn (FEDORA-2024-bf29e92de4)
2024-03-25 00:00:00
Ubuntu: Security Advisory (USN-6691-1)
2024-03-13 00:00:00
Fedora: Security Advisory for ovn (FEDORA-2024-082155d6b7)
2024-03-25 00:00:00
redhatcve
redhatcve
CVE-2024-2182
2024-03-12 15:46:39
nessus
nessus
RHEL 8 : ovn23.06 (RHSA-2024:1385)
2024-03-19 00:00:00
RHEL 7 : ovn (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 9 : ovn23.06 (RHSA-2024:1391)
2024-03-19 00:00:00
cve
cve
CVE-2024-2182
2024-03-12 17:15:59
ubuntucve
ubuntucve
CVE-2024-2182
2024-03-12 00:00:00
prion
prion
Design/Logic Flaw
2024-03-12 17:15:00
cvelist
cvelist
nvd
nvd
CVE-2024-2182
2024-03-12 17:15:59
debiancve
debiancve
CVE-2024-2182
2024-03-12 17:15:59
osv
osv
ovn vulnerability
2024-03-12 14:18:08
photon
photon
Important Photon OS Security Update - PHSA-2024-3.0-0738
2024-03-19 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
7.2 High
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
17.1%
Related for USN-6691-1