Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:45453
HistoryFeb 12, 2024 - 6:54 p.m.

Denial Of Service

2024-02-1218:54:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
openvswitch
vulnerability
denial of service
geneve packets
memory accesses

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

openvswitch is vulnerable to Denial Of Service. The vulnerability is due to a flaw in the handling of Geneve packets in Open vSwitch. Specifically, when hardware offloading via the netlink path is enabled, allows attackers to exploit Open vSwitch by sending specially crafted Geneve packets, potentially leading to a denial of service and triggering invalid memory accesses.

Related

nessus 14
openvas 7
cbl_mariner 2
alpinelinux 1
prion 1
cve 1
ubuntucve 1
debiancve 1
redhatcve 1
cvelist 1
nvd 1
redos 1
f5 1
redhat 6
fedora 2
ubuntu 1
osv 2
debian 1
nessus
nessus
SUSE SLES15 / openSUSE 15 Security Update : openvswitch3 (SUSE-SU-2024:0738-1)
2024-03-02 00:00:00
RHEL 7 : openvswsitch (Unpatched Vulnerability)
2024-05-11 00:00:00
SUSE SLES15 Security Update : openvswitch (SUSE-SU-2024:0912-1)
2024-03-19 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:0922-1)
2024-05-07 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:0937-1)
2024-05-07 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:0912-1)
2024-05-07 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-3966 affecting package openvswitch for versions less than 2.17.9-1
2024-06-06 19:53:22
CVE-2023-3966 affecting package openvswitch for versions less than 3.3.0-1
2024-03-19 17:21:46
alpinelinux
alpinelinux
CVE-2023-3966
2024-02-22 13:15:07
prion
prion
Design/Logic Flaw
2024-02-22 13:15:00
cve
cve
CVE-2023-3966
2024-02-22 13:15:07
ubuntucve
ubuntucve
CVE-2023-3966
2024-02-08 00:00:00
debiancve
debiancve
CVE-2023-3966
2024-02-22 13:15:07
redhatcve
redhatcve
CVE-2023-3966
2024-02-09 02:59:34
cvelist
cvelist
CVE-2023-3966 Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet
2024-02-22 12:15:53
nvd
nvd
CVE-2023-3966
2024-02-22 13:15:07
redos
redos
ROS-20240422-08
2024-04-22 00:00:00
f5
f5
K000139922: Open vSwitch vulnerabilities CVE-2023-3966 and CVE-2023-5366
2024-06-06 00:00:00
redhat
redhat
(RHSA-2024:1234) Important: openvswitch2.17 security update
2024-03-07 17:58:17
(RHSA-2024:1235) Important: openvswitch3.1 security update
2024-03-07 17:58:20
(RHSA-2024:1227) Important: openvswitch3.1 security update
2024-03-07 17:57:27
fedora
fedora
[SECURITY] Fedora 40 Update: openvswitch-3.3.0-1.fc40
2024-03-23 00:49:44
[SECURITY] Fedora 39 Update: openvswitch-3.2.2-1.fc39
2024-03-16 01:17:38
ubuntu
ubuntu
Open vSwitch vulnerabilities
2024-03-12 00:00:00
osv
osv
openvswitch - security update
2024-03-14 00:00:00
openvswitch vulnerabilities
2024-03-12 11:34:51
debian
debian
[SECURITY] [DSA 5640-1] openvswitch security update
2024-03-14 13:20:02

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON
Related for VERACODE:45453
nessus14openvas7cbl_mariner2alpinelinux1prion1cve1ubuntucve1debiancve1redhatcve1cvelist1nvd1redos1f51redhat6fedora2ubuntu1osv2debian1