Red Hat Security Advisory

RHSA-2024:1227

openvswitch3.1 security update

Released 2024-03-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Fast Datapath for Red Hat Enterprise Linux 9 openvswitch3.1-3.1.0-88.el9fdp, openvswitch3.1-devel-3.1.0-88.el9fdp, openvswitch3.1-ipsec-3.1.0-88.el9fdp +2

Fixes 2 records

TI-2023-03683 CVE-2023-3966 · GHSA-r9cj-pfgj-jc26

Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet

MEDIUM 41

A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01252 Published 2024-02-22 Partial fix · 3.1.0 CWE-248

TI-2023-04937 CVE-2023-5366 · GHSA-f89w-2cg8-8h78

Openvswitch don't match packets on nd_target field

LOW 31

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00416 Published 2023-10-06 Partial fix CWE-345