7.5
Élevée
CVE-2020-35498 A vulnerability was found in openvswitch
Description
A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| openvswitch | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- www.openwall.com www.openwall.com
- DSA-4852 www.debian.org
- [debian-lts-announce] 20210219 [SECURITY] [DLA 2571-1] openvswitch security update lists.debian.org
- FEDORA-2021-fba11d37ee lists.fedoraproject.org
- GLSA-202311-16 security.gentoo.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de openvswitch
Les 6 CVE de openvswitch →
CVE-2023-3966
A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a…
7.5
Élevée
CVE-2023-5366
A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass…
7.1
Élevée
CVE-2023-1668
A flaw was found in openvswitch (OVS)
8.2
Élevée
CVE-2022-4337
An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch
Non notée