Описание
A missing upper-bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an attacker with OVSDB write access to request an excessive number of handler or revalidation threads. This can cause a denial of service (DoS) via resource exhaustion.
A flaw was found in Open vSwitch. A missing upper-bound check in udpif_set_threads() allows an attacker with OVSDB write access to request an excessive number of handler or revalidation threads, causing resource exhaustion and denial of service. Reported against Open vSwitch v3.6.90; affects deployments where OVSDB is writable by untrusted parties.
Отчет
Open vSwitch is vulnerable to denial of service via resource exhaustion in udpif_set_threads() due to a missing upper-bound check on thread counts. An attacker with high privileges (OVSDB write access) can configure excessive handler or revalidation threads to exhaust system resources. CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H (4.4). Affects FDP, OpenShift OVS RPMs, RHEL-7 ELS, and Fedora openvswitch packages.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Fast Datapath for RHEL 10 | openvswitch3.5 | Fix deferred | ||
| Fast Datapath for RHEL 10 | openvswitch3.6 | Fix deferred | ||
| Fast Datapath for RHEL 7 | openvswitch | Fix deferred | ||
| Fast Datapath for RHEL 7 | openvswitch2.10 | Fix deferred | ||
| Fast Datapath for RHEL 7 | openvswitch2.11 | Fix deferred | ||
| Fast Datapath for RHEL 7 | openvswitch2.12 | Fix deferred | ||
| Fast Datapath for RHEL 7 | openvswitch2.13 | Fix deferred | ||
| Fast Datapath for RHEL 8 | openvswitch2.11 | Fix deferred | ||
| Fast Datapath for RHEL 8 | openvswitch2.12 | Fix deferred | ||
| Fast Datapath for RHEL 8 | openvswitch2.13 | Fix deferred |
Показывать по
Дополнительная информация
Статус:
EPSS
4.4 Medium
CVSS3
Связанные уязвимости
A missing upper-bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an attacker with OVSDB write access to request an excessive number of handler or revalidation threads. This can cause a denial of service (DoS) via resource exhaustion.
A missing upper-bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an attacker with OVSDB write access to request an excessive number of handler or revalidation threads. This can cause a denial of service (DoS) via resource exhaustion.
A missing upper-bound check in the udpif_set_threads() function of Ope ...
A missing upper-bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an attacker with OVSDB write access to request an excessive number of handler or revalidation threads. This can cause a denial of service (DoS) via resource exhaustion.
EPSS
4.4 Medium
CVSS3