Ubuntu.comUB:CVE-2024-2182CVE-2024-2182
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.0005 Low
EPSS
Percentile
17.1%
A flaw was found in the Open Virtual Network (OVN). In OVN clusters where
BFD is used between hypervisors for high availability, an attacker can
inject specially crafted BFD packets from inside unprivileged workloads,
including virtual machines or containers, that can trigger a denial of
service.
Bugs
Notes
| Author | Note |
|---|---|
| seth-arnold | patches are in this message on distros: Message-ID: <[email protected]> |
Related
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.0005 Low
EPSS
Percentile
17.1%