Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-27827

Опубликовано: 13 янв. 2021
Источник: redhat
CVSS3: 7.5

Описание

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

A flaw was found in multiple versions of Open vSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Отчет

Red Hat OpenStack Platform 13's openvswitch package will receive it's fixes from Fast Datapath.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Fast Datapath for RHEL 7openvswitch2.10Out of support scope
Fast Datapath for RHEL 7openvswitch2.12Out of support scope
Fast Datapath for RHEL 8openvswitch2.12Out of support scope
Red Hat Enterprise Linux 8lldpdWill not fix
Red Hat OpenShift Container Platform 4openvswitch2.13Will not fix
Red Hat OpenStack Platform 10 (Newton)openvswitchOut of support scope
Red Hat OpenStack Platform 13 (Queens)openvswitchWill not fix
Fast Datapath for Red Hat Enterprise Linux 7openvswitch2.11FixedRHSA-2021:083415.03.2021
Fast Datapath for Red Hat Enterprise Linux 7openvswitch2.13FixedRHSA-2021:083515.03.2021
Fast Datapath for Red Hat Enterprise Linux 7openvswitchFixedRHSA-2021:207720.05.2021

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-400
https://bugzilla.redhat.com/show_bug.cgi?id=1921438lldp/openvswitch: denial of service via externally triggered memory leak

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 4 лет назад

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

CVSS3: 7.5
nvd
больше 4 лет назад

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

CVSS3: 7.5
msrc
около 4 лет назад

Описание отсутствует

CVSS3: 7.5
debian
больше 4 лет назад

A flaw was found in multiple versions of OpenvSwitch. Specially crafte ...

suse-cvrf
больше 4 лет назад

Security update for openvswitch

7.5 High

CVSS3