Ovn: insufficient validation of bfd packets may lead to denial of service
Priority LOW 30CWE-346Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Partial Red Hat: 2 fixed, 6 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-346.
Summary
A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00783 56th percentileScored 2026-11-07
Fix Partial Red Hat: 10 advisoriesRed Hat: 2 fixed, 6 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | ovn | 20.03.0 and later | — | No fix listed | CNA |
| Red Hat | Fast Datapath for Red Hat Enterprise Linux 8 | — | 23.06.1-112.el8fdp | Patch available | CNA |
| Red Hat | Fast Datapath for Red Hat Enterprise Linux 8 | — | 22.12.1-94.el8fdp | Patch available | CNA |
| Red Hat | Fast Datapath for Red Hat Enterprise Linux 8 | — | 22.03.3-71.el8fdp | Patch available | CNA |
| Red Hat | Fast Datapath for Red Hat Enterprise Linux 8 | — | 23.03.1-100.el8fdp | Patch available | CNA |
| Red Hat | Fast Datapath for Red Hat Enterprise Linux 8 | — | 21.12.0-142.el8fdp | Patch available | CNA |
| Red Hat | Fast Datapath for Red Hat Enterprise Linux 9 | — | 23.09.0-136.el9fdp | Patch available | CNA |
| Red Hat | Fast Datapath for Red Hat Enterprise Linux 9 | — | 23.06.1-112.el9fdp | Patch available | CNA |
| Red Hat | Fast Datapath for Red Hat Enterprise Linux 9 | — | 22.12.1-94.el9fdp | Patch available | CNA |
| Red Hat | Fast Datapath for Red Hat Enterprise Linux 9 | — | 22.03.3-71.el9fdp | Patch available | CNA |
| Red Hat | Fast Datapath for Red Hat Enterprise Linux 9 | — | 23.03.1-100.el9fdp | Patch available | CNA |
| Red Hat | Fast Datapath for RHEL 10 | — | — | No fix listed | CNA |
| Red Hat | Fast Datapath for RHEL 10 | — | — | No fix listed | CNA |
| Red Hat | Fast Datapath for RHEL 10 | — | — | No fix listed | CNA |
| Red Hat | Fast Datapath for RHEL 7 | — | — | No fix listed | CNA |
| Red Hat | Fast Datapath for RHEL 7 | — | — | No fix listed | CNA |
| Red Hat | Fast Datapath for RHEL 7 | — | — | No fix listed | CNA |
| Red Hat | Fast Datapath for RHEL 8 | — | — | No fix listed | CNA |
| Red Hat | Fast Datapath for RHEL 8 | — | — | No fix listed | CNA |
| Red Hat | Fast Datapath for RHEL 8 | — | — | No fix listed | CNA |
| Red Hat | Fast Datapath for RHEL 8 | — | — | No fix listed | CNA |
| Red Hat | Fast Datapath for RHEL 8 | — | — | No fix listed | CNA |
| Red Hat | Fast Datapath for RHEL 9 | — | — | No fix listed | CNA |
| Red Hat | Fast Datapath for RHEL 9 | — | — | No fix listed | CNA |
| Red Hat | Fast Datapath for RHEL 9 | — | — | No fix listed | CNA |
| Red Hat | Fast Datapath for RHEL 9 | — | — | No fix listed | CNA |
| Red Hat | Fast Datapath for RHEL 9 | — | — | No fix listed | CNA |
| Red Hat | Fast Datapath for RHEL 9 | — | — | No fix listed | CNA |
| Red Hat | Fast Datapath for RHEL 9 | — | — | No fix listed | CNA |
| Red Hat | Fast Datapath for RHEL 9 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenStack Platform 13 (Queens) | — | — | No fix listed | CNA |
- ovn Vendor— Affected 20.03.0 and later Fixed in — No fix listed CNA
- Fast Datapath for Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 23.06.1-112.el8fdp Patch available CNA
- Fast Datapath for Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 22.12.1-94.el8fdp Patch available CNA
- Fast Datapath for Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 22.03.3-71.el8fdp Patch available CNA
- Fast Datapath for Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 23.03.1-100.el8fdp Patch available CNA
- Fast Datapath for Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 21.12.0-142.el8fdp Patch available CNA
- Fast Datapath for Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 23.09.0-136.el9fdp Patch available CNA
- Fast Datapath for Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 23.06.1-112.el9fdp Patch available CNA
- Fast Datapath for Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 22.12.1-94.el9fdp Patch available CNA
- Fast Datapath for Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 22.03.3-71.el9fdp Patch available CNA
- Fast Datapath for Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 23.03.1-100.el9fdp Patch available CNA
- Fast Datapath for RHEL 10 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Fast Datapath for RHEL 10 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Fast Datapath for RHEL 10 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Fast Datapath for RHEL 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Fast Datapath for RHEL 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Fast Datapath for RHEL 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Fast Datapath for RHEL 8 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Fast Datapath for RHEL 8 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Fast Datapath for RHEL 8 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Fast Datapath for RHEL 8 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Fast Datapath for RHEL 8 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Fast Datapath for RHEL 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Fast Datapath for RHEL 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Fast Datapath for RHEL 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Fast Datapath for RHEL 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Fast Datapath for RHEL 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Fast Datapath for RHEL 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Fast Datapath for RHEL 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Fast Datapath for RHEL 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenStack Platform 13 (Queens) VendorRed Hat Affected — Fixed in — No fix listed CNA
CPE names CNA · 6
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/o:redhat:enterprise_linux:8::fastdatapath | 8 | — | Red Hat |
| cpe:/o:redhat:enterprise_linux:9::fastdatapath | 9 | — | Red Hat |
| cpe:/o:redhat:enterprise_linux:10::fastdatapath | 10 | — | Red Hat |
| cpe:/o:redhat:enterprise_linux:7::fastdatapath | 7 | — | Red Hat |
| cpe:/a:redhat:openshift:4 | 4 | — | Red Hat |
| cpe:/a:redhat:openstack:13 | 13 | — | Red Hat |
- cpe:/o:redhat:enterprise_linux:8::fastdatapath Versions 8 — ·Red Hat
- cpe:/o:redhat:enterprise_linux:9::fastdatapath Versions 9 — ·Red Hat
- cpe:/o:redhat:enterprise_linux:10::fastdatapath Versions 10 — ·Red Hat
- cpe:/o:redhat:enterprise_linux:7::fastdatapath Versions 7 — ·Red Hat
- cpe:/a:redhat:openshift:4 Versions 4 — ·Red Hat
- cpe:/a:redhat:openstack:13 Versions 13 — ·Red Hat
Remediation
Red Hat 10 advisories
- RHSA-2024:4035 Released 2024-06-20 · Red Hat rating Importantovn-2021 security update
- Fast Datapath for Red Hat Enterprise Linux 8 ovn-2021-21.12.0-142.el8fdp, ovn-2021-central-21.12.0-142.el8fdp, ovn-2021-host-21.12.0-142.el8fdp +1
- RHSA-2024:1393 Released 2024-03-19 · Red Hat rating Importantovn22.03 security update
- Fast Datapath for Red Hat Enterprise Linux 9 ovn22.03-22.03.3-71.el9fdp, ovn22.03-central-22.03.3-71.el9fdp, ovn22.03-host-22.03.3-71.el9fdp +1
- RHSA-2024:1394 Released 2024-03-19 · Red Hat rating Importantovn23.03 security update
- Fast Datapath for Red Hat Enterprise Linux 9 ovn23.03-23.03.1-100.el9fdp, ovn23.03-central-23.03.1-100.el9fdp, ovn23.03-host-23.03.1-100.el9fdp +1
Show 7 more Red Hat advisories
- RHSA-2024:1392 Released 2024-03-19 · Red Hat rating Importantovn22.12 security update
- Fast Datapath for Red Hat Enterprise Linux 9 ovn22.12-22.12.1-94.el9fdp, ovn22.12-central-22.12.1-94.el9fdp, ovn22.12-host-22.12.1-94.el9fdp +1
- RHSA-2024:1391 Released 2024-03-19 · Red Hat rating Importantovn23.06 security update
- Fast Datapath for Red Hat Enterprise Linux 9 ovn23.06-23.06.1-112.el9fdp, ovn23.06-central-23.06.1-112.el9fdp, ovn23.06-host-23.06.1-112.el9fdp +1
- RHSA-2024:1390 Released 2024-03-19 · Red Hat rating Importantovn23.09 security update
- Fast Datapath for Red Hat Enterprise Linux 9 ovn23.09-23.09.0-136.el9fdp, ovn23.09-central-23.09.0-136.el9fdp, ovn23.09-host-23.09.0-136.el9fdp +1
- RHSA-2024:1388 Released 2024-03-19 · Red Hat rating Importantovn23.03 security update
- Fast Datapath for Red Hat Enterprise Linux 8 ovn23.03-23.03.1-100.el8fdp, ovn23.03-central-23.03.1-100.el8fdp, ovn23.03-host-23.03.1-100.el8fdp +1
- RHSA-2024:1385 Released 2024-03-19 · Red Hat rating Importantovn23.06 security update
- Fast Datapath for Red Hat Enterprise Linux 8 ovn23.06-23.06.1-112.el8fdp, ovn23.06-central-23.06.1-112.el8fdp, ovn23.06-host-23.06.1-112.el8fdp +1
- RHSA-2024:1386 Released 2024-03-19 · Red Hat rating Importantovn22.12 security update
- Fast Datapath for Red Hat Enterprise Linux 8 ovn22.12-22.12.1-94.el8fdp, ovn22.12-central-22.12.1-94.el8fdp, ovn22.12-host-22.12.1-94.el8fdp +1
- RHSA-2024:1387 Released 2024-03-19 · Red Hat rating Importantovn22.03 security update
- Fast Datapath for Red Hat Enterprise Linux 8 ovn22.03-22.03.3-71.el8fdp, ovn22.03-central-22.03.3-71.el8fdp, ovn22.03-host-22.03.3-71.el8fdp +1
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Fast Datapath for RHEL 10 | Affected | No fix yet: Fix deferred |
| Fast Datapath for RHEL 7 | Affected | No fix planned: Out of support scope |
| Fast Datapath for RHEL 8 | Affected | No fix planned: Out of support scope |
| Fast Datapath for RHEL 9 | Affected | No fix yet |
| Red Hat OpenShift Container Platform 4 | Affected | No fix yet: Fix deferred |
| Red Hat OpenStack Platform 13 (Queens) | Affected | No fix planned: Out of support scope |
| Fast Datapath for Red Hat Enterprise Linux 8 | Fixed | RHSA-2024:1385, RHSA-2024:1386, RHSA-2024:1387, RHSA-2024:1388, RHSA-2024:4035 |
| Fast Datapath for Red Hat Enterprise Linux 9 | Fixed | RHSA-2024:1390, RHSA-2024:1391, RHSA-2024:1392, RHSA-2024:1393, RHSA-2024:1394 |
Timeline
- 2026-10-02 Threatist record created from CVE-2024-2182
- 2026-10-03 Alias added: GHSA-p67c-35g3-9pqc
- 2026-10-19 Affected versions changed · CNA
- 2026-10-20 Affected versions changed · Red Hat
References
Advisory 10
More Red Hat vulnerabilities
- TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
- TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
- TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2024-2182 · CVE Program
- CVE-2024-2182 · NVD
- FIRST EPSS
- GHSA-p67c-35g3-9pqc · GitHub Advisory Database · CC BY 4.0
- CVE-2024-2182 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences