Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2023-3966

Опубликовано: 08 фев. 2024
Источник: redhat
CVSS3: 7.5

Описание

A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is enabled.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Fast Datapath for RHEL 7openvswitchAffected
Fast Datapath for RHEL 7openvswitch2.10Out of support scope
Fast Datapath for RHEL 7openvswitch2.11Out of support scope
Fast Datapath for RHEL 7openvswitch2.12Out of support scope
Fast Datapath for RHEL 7openvswitch2.13Affected
Fast Datapath for RHEL 8openvswitch2.11Out of support scope
Fast Datapath for RHEL 8openvswitch2.12Out of support scope
Fast Datapath for RHEL 8openvswitch2.13Affected
Fast Datapath for RHEL 8openvswitch2.15Affected
Fast Datapath for RHEL 8openvswitch2.16Out of support scope

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-248
https://bugzilla.redhat.com/show_bug.cgi?id=2178363openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 2 года назад

A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is enabled.

CVSS3: 7.5
nvd
почти 2 года назад

A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is enabled.

CVSS3: 7.5
msrc
почти 2 года назад

Описание отсутствует

CVSS3: 7.5
debian
почти 2 года назад

A flaw was found in Open vSwitch where multiple versions are vulnerabl ...

suse-cvrf
больше 1 года назад

Security update for openvswitch

7.5 High

CVSS3