Описание
Security update for openvswitch
This update for openvswitch fixes the following issues:
- CVE-2024-2182: Fixed insufficient validation of incoming BFD packets may lead to denial of service (bsc#1255435)
Список пакетов
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
libopenvswitch-2_11-0-2.11.5-3.27.1
openvswitch-2.11.5-3.27.1
Ссылки
- Link for SUSE-SU-2026:0619-1
- E-Mail link for SUSE-SU-2026:0619-1
- SUSE Security Ratings
- SUSE Bug 1255435
- SUSE CVE CVE-2024-2182 page
Описание
A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service.
Затронутые продукты
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenvswitch-2_11-0-2.11.5-3.27.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openvswitch-2.11.5-3.27.1
Ссылки
- CVE-2024-2182
- SUSE Bug 1255435