8.1
High
CVE-2025-0650 A flaw was found in the Open Virtual Network (OVN)
Description
A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fast Datapath for Red Hat Enterprise Linux 8 | Versions not published | |
| Fast Datapath for Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat OpenShift Container Platform 4 | Versions not published |
References
- RHSA-2025:1083 access.redhat.com
- RHSA-2025:1084 access.redhat.com
- RHSA-2025:1085 access.redhat.com
- RHSA-2025:1086 access.redhat.com
- RHSA-2025:1087 access.redhat.com
- RHSA-2025:1088 access.redhat.com
- RHSA-2025:1089 access.redhat.com
- RHSA-2025:1090 access.redhat.com
- RHSA-2025:1091 access.redhat.com
- RHSA-2025:1092 access.redhat.com
- RHSA-2025:1093 access.redhat.com
- RHSA-2025:1094 access.redhat.com
- RHSA-2025:1095 access.redhat.com
- RHSA-2025:1096 access.redhat.com
- RHSA-2025:1097 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2339537 bugzilla.redhat.com
- www.openwall.com www.openwall.com
Timeline
- Published
- Last modified
Other CVEs of Fast Datapath for Red Hat Enterprise Linux 8
The 7 CVEs of Fast Datapath for Red Hat Enterprise Linux 8 →
CVE-2026-5265
When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original…
6.5
Medium
CVE-2026-5367
A flaw was found in OVN (Open Virtual Network)
8.6
High
CVE-2024-11614
An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature
7.4
High
CVE-2024-52337
Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method
5.5
Medium