Skip to content
fr Sign in
7.1 High

CVE-2023-5366 A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass…

Description

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses.

Affected products and versions

Product Affected versions Fixed in
openvswitch Versions not published
Fast Datapath for RHEL 7 Versions not published
Fast Datapath for RHEL 8 Versions not published
Fast Datapath for RHEL 9 Versions not published
Red Hat Enterprise Linux 7 Versions not published
Red Hat OpenShift Container Platform 3.11 Versions not published
Red Hat OpenShift Container Platform 4 Versions not published
Red Hat OpenStack Platform 16.1 Versions not published
Red Hat OpenStack Platform 16.2 Versions not published
Show the 2 other branches
Product Affected versions Fixed in
Red Hat Virtualization 4 Versions not published
Fedora Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of openvswitch

The 6 CVEs of openvswitch →
CVE-2023-3966 A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a… 7.5 High CVE-2023-1668 A flaw was found in openvswitch (OVS) 8.2 High CVE-2022-4337 An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch Not rated CVE-2022-4338 An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch Not rated
Track this CVE