Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gmx5-xv9g-ph7f

Опубликовано: 23 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.

A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.

EPSS

Процентиль: 62%
0.00437
Низкий

8.1 High

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 8.1
ubuntu
5 месяцев назад

A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.

CVSS3: 8.1
redhat
больше 1 года назад

A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.

CVSS3: 8.1
nvd
5 месяцев назад

A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.

CVSS3: 8.1
debian
5 месяцев назад

A flaw was found in the Open Virtual Network (OVN). Specially crafted ...

suse-cvrf
4 месяца назад

Security update for openvswitch3

EPSS

Процентиль: 62%
0.00437
Низкий

8.1 High

CVSS3

Дефекты

CWE-284