Read the docs
TI-2020-16898 Aliases CVE-2020-27827GHSA-m3mq-x6x3-4537

Uncontrolled resource consumption in lldp/openvswitch

Priority MEDIUM 45CWE-400Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 9 fixed, 6 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-400.

Summary

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.03235 88th percentileScored 2026-11-07
Fix Partial Red Hat: 10 advisoriesRed Hat: 9 fixed, 6 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—lldp/openvswitchlldpd 1.0.8, openvswitch 2.14.1, openvswitch 2.13.2, openvswitch 2.12.2, openvswitch 2.11.5, openvswitch 2.10.6, openvswitch 2.9.8, openvswitch 2.8.10, openvswitch 2.7.12, openvswitch 2.6.9—No fix listedCNA
  • lldp/openvswitch Vendor— Affected lldpd 1.0.8, openvswitch 2.14.1, openvswitch 2.13.2, openvswitch 2.12.2, openvswitch 2.11.5, openvswitch 2.10.6, openvswitch 2.9.8, openvswitch 2.8.10, openvswitch 2.7.12, openvswitch 2.6.9 Fixed in — No fix listed CNA

CPE configurations NVD · 29

CPEVersionsRoleVendor
cpe:2.3:a:lldpd_project:lldpd:*:*:*:*:*:*:*:*before 1.0.8VulnerableLldpd Project
cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*2.6.0 to before 2.6.9; 2.7.0 to before 2.7.12; 2.8.0 to before 2.8.10; 2.9.0 to before 2.9.8; 2.10.0 to before 2.10.6; 2.11.0 to before 2.11.5; 2.12.0 to before 2.12.2; 2.13.0 to before 2.13.2; 2.14.0 to before 2.14.1VulnerableOpenvswitch
cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*4.0VulnerableRed Hat
cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*10VulnerableRed Hat
cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*13VulnerableRed Hat
cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*4.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*33VulnerableFedoraproject
cpe:2.3:o:siemens:simatic_hmi_unified_comfort_panels_firmware:*:*:*:*:*:*:*:*before 17VulnerableSiemens
  • cpe:2.3:a:lldpd_project:lldpd:*:*:*:*:*:*:*:* Versions before 1.0.8 Vulnerable ·Lldpd Project
  • cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:* Versions 2.6.0 to before 2.6.9; 2.7.0 to before 2.7.12; 2.8.0 to before 2.8.10; 2.9.0 to before 2.9.8; 2.10.0 to before 2.10.6; 2.11.0 to before 2.11.5; 2.12.0 to before 2.12.2; 2.13.0 to before 2.13.2; 2.14.0 to before 2.14.1 Vulnerable ·Openvswitch
  • cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:* Versions 10 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:* Versions 13 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:* Versions 33 Vulnerable ·Fedoraproject
  • cpe:2.3:o:siemens:simatic_hmi_unified_comfort_panels_firmware:*:*:*:*:*:*:*:* Versions before 17 Vulnerable ·Siemens
Show 19 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:siemens:simatic_hmi_unified_comfort_panels:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:simatic_net_cp_1243-1_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:h:siemens:simatic_net_cp_1243-1:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:simatic_net_cp_1243-8_irc_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:h:siemens:simatic_net_cp_1243-8_irc:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:simatic_net_cp_1542sp-1_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:h:siemens:simatic_net_cp_1542sp-1:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:simatic_net_cp_1542sp-1_irc_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:h:siemens:simatic_net_cp_1542sp-1_irc:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:simatic_net_cp_1543-1_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:h:siemens:simatic_net_cp_1543-1:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:simatic_net_cp_1543sp-1_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:h:siemens:simatic_net_cp_1543sp-1:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:simatic_net_cp_1545-1_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:h:siemens:simatic_net_cp_1545-1:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:tim_1531_irc_firmware:*:*:*:*:*:*:*:*before 2.2VulnerableSiemens
cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:sinumerik_one_firmware:*:*:*:*:*:*:*:*before 2.0.1VulnerableSiemens
cpe:2.3:h:siemens:sinumerik_one:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:h:siemens:simatic_hmi_unified_comfort_panels:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:simatic_net_cp_1243-1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_net_cp_1243-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:simatic_net_cp_1243-8_irc_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_net_cp_1243-8_irc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:simatic_net_cp_1542sp-1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_net_cp_1542sp-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:simatic_net_cp_1542sp-1_irc_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_net_cp_1542sp-1_irc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:simatic_net_cp_1543-1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_net_cp_1543-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:simatic_net_cp_1543sp-1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_net_cp_1543sp-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:simatic_net_cp_1545-1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_net_cp_1545-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:tim_1531_irc_firmware:*:*:*:*:*:*:*:* Versions before 2.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:sinumerik_one_firmware:*:*:*:*:*:*:*:* Versions before 2.0.1 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:sinumerik_one:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens

Remediation

Red Hat 10 advisories

  • RHSA-2024:9158 Released 2024-11-12 · Red Hat rating Moderate
    lldpd security update
    • Red Hat Enterprise Linux AppStream (v. 9) lldpd-1.0.18-4.el9, lldpd-devel-1.0.18-4.el9
  • RHSA-2021:2456 Released 2021-06-16 · Red Hat rating Important
    Red Hat OpenStack Platform 13.0 (openvswitch2.11) security update
    • Red Hat OpenStack Platform 13.0 openvswitch2.11-2.11.3-86.el7fdp, openvswitch2.11-devel-2.11.3-86.el7fdp, openvswitch2.11-test-2.11.3-86.el7fdp +1
  • RHSA-2021:2077 Released 2021-05-20 · Red Hat rating Important
    openvswitch security update
    • Fast Datapath for Red Hat Enterprise Linux 7 openvswitch-2.9.9-1.el7fdp, openvswitch-devel-2.9.9-1.el7fdp, openvswitch-test-2.9.9-1.el7fdp +1
    • Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts openvswitch-2.9.9-1.el7fdp, openvswitch-devel-2.9.9-1.el7fdp, python-openvswitch-2.9.9-1.el7fdp
Show 7 more Red Hat advisories
  • RHSA-2021:1051 Released 2021-03-31 · Red Hat rating Moderate
    RHV-H enhancement and security update (redhat-virtualization-host) 4.3.14
    • RHEL 7-based RHEV-H for RHEV 4 (build requirements) redhat-virtualization-host-4.3.14-20210322.0.el7_9, redhat-virtualization-host-image-update-4.3.14-20210322.0.el7_9
    • Red Hat Virtualization 4 Hypervisor for RHEL 7 redhat-virtualization-host-4.3.14-20210322.0.el7_9, redhat-virtualization-host-image-update-4.3.14-20210322.0.el7_9
  • RHSA-2021:1050 Released 2021-03-31 · Red Hat rating Moderate
    openvswitch2.11 security update
    • Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts openvswitch2.11-2.11.3-86.el7fdp, openvswitch2.11-devel-2.11.3-86.el7fdp, ovn2.11-2.11.1-57.el7fdp +3
  • RHSA-2021:0976 Released 2021-03-23 · Red Hat rating Moderate
    Red Hat Virtualization Host security, bug fix and enhancement update (4.4.4-2)
    • Red Hat Virtualization 4 Hypervisor for RHEL 8 redhat-virtualization-host-4.4.4-20210307.0.el8_3, redhat-virtualization-host-image-update-4.4.4-20210307.0.el8_3
  • RHSA-2021:0834 Released 2021-03-15 · Red Hat rating Moderate
    openvswitch2.11 security update
    • Fast Datapath for Red Hat Enterprise Linux 7 openvswitch2.11-2.11.3-86.el7fdp, openvswitch2.11-devel-2.11.3-86.el7fdp, openvswitch2.11-test-2.11.3-86.el7fdp +1
  • RHSA-2021:0835 Released 2021-03-15 · Red Hat rating Moderate
    openvswitch2.13 security update
    • Fast Datapath for Red Hat Enterprise Linux 7 openvswitch2.13-2.13.0-81.el7fdp, openvswitch2.13-devel-2.13.0-81.el7fdp, openvswitch2.13-ipsec-2.13.0-81.el7fdp +2
  • RHSA-2021:0837 Released 2021-03-15 · Red Hat rating Moderate
    openvswitch2.11 security update
    • Fast Datapath for Red Hat Enterprise Linux 8 network-scripts-openvswitch2.11-2.11.3-83.el8fdp, openvswitch2.11-2.11.3-83.el8fdp, openvswitch2.11-devel-2.11.3-83.el8fdp +2
  • RHSA-2021:0497 Released 2021-02-11 · Red Hat rating Moderate
    openvswitch2.13 security and bug fix update
    • Fast Datapath for Red Hat Enterprise Linux 8 network-scripts-openvswitch2.13-2.13.0-79.5.el8fdp, openvswitch2.13-2.13.0-79.5.el8fdp, openvswitch2.13-devel-2.13.0-79.5.el8fdp +3

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Fast Datapath for RHEL 7AffectedNo fix planned: Out of support scope
Fast Datapath for RHEL 8AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 8AffectedNo fix planned: Will not fix
Red Hat OpenShift Container Platform 4AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 10 (Newton)AffectedNo fix planned: Out of support scope
Red Hat OpenStack Platform 13 (Queens)AffectedNo fix planned: Will not fix
Fast Datapath for Red Hat Enterprise Linux 7Fixed RHSA-2021:0834, RHSA-2021:0835, RHSA-2021:2077
Fast Datapath for Red Hat Enterprise Linux 8Fixed RHSA-2021:0497, RHSA-2021:0837
RHEL 7-based RHEV-H for RHEV 4 (build requirements)Fixed RHSA-2021:1051
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2024:9158
Red Hat OpenStack Platform 13.0Fixed RHSA-2021:2456
Red Hat Virtualization 4 Hypervisor for RHEL 7Fixed RHSA-2021:1051
Red Hat Virtualization 4 Hypervisor for RHEL 8Fixed RHSA-2021:0976
Red Hat Virtualization 4 Management Agent for RHEL 7 HostsFixed RHSA-2021:1050
Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS HostsFixed RHSA-2021:2077
Not affected: 2 products
  • RHEL 7-based RHEV-H for RHEV 4 (build requirements)
  • RHEL 8-based RHEV-H for RHEV 4 (build requirements)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-27827
  2. 2026-10-03 Alias added: GHSA-m3mq-x6x3-4537

References

Patch 2

Advisory 6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences