7.5
High
CVE-2020-35498 A vulnerability was found in openvswitch
Description
A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| openvswitch | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- www.openwall.com www.openwall.com
- DSA-4852 www.debian.org
- [debian-lts-announce] 20210219 [SECURITY] [DLA 2571-1] openvswitch security update lists.debian.org
- FEDORA-2021-fba11d37ee lists.fedoraproject.org
- GLSA-202311-16 security.gentoo.org
Timeline
- Published
- Last modified
Other CVEs of openvswitch
The 6 CVEs of openvswitch →
CVE-2023-3966
A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a…
7.5
High
CVE-2023-5366
A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass…
7.1
High
CVE-2023-1668
A flaw was found in openvswitch (OVS)
8.2
High
CVE-2022-4337
An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch
Not rated