Skip to content
fr Sign in
7.5 High

CVE-2023-3966 A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a…

Description

A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is enabled.

Affected products and versions

Product Affected versions Fixed in
openvswitch 3.1 earliest → < 3.1.0 3.1.0
Fast Datapath for RHEL 7 Versions not published
Fast Datapath for RHEL 8 Versions not published
Fast Datapath for RHEL 9 Versions not published
Red Hat Enterprise Linux 7 Versions not published
Red Hat OpenShift Container Platform 3.11 Versions not published
OpenStack RDO Versions not published
Fedora Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of openvswitch

The 6 CVEs of openvswitch →
CVE-2023-5366 A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass… 7.1 High CVE-2023-1668 A flaw was found in openvswitch (OVS) 8.2 High CVE-2022-4337 An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch Not rated CVE-2022-4338 An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch Not rated
Track this CVE