Open vSwitch 2.6.6

CPE Details

Open vSwitch 2.6.6
openvswitch
openvswitch
2.6.6
2021-02-16
13h42 +00:00
2021-02-16
13h42 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:openvswitch:openvswitch:2.6.6:*:*:*:*:*:*:*

Informations

Vendor

openvswitch

Product

openvswitch

Version

2.6.6

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2023-5366 2023-10-06 17h43 +00:00 A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses.
7.1
Haute
CVE-2022-4337 2023-01-09 23h00 +00:00 An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.
9.8
Critique
CVE-2022-4338 2023-01-09 23h00 +00:00 An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.
9.8
Critique
CVE-2019-25076 2022-09-08 20h08 +00:00 The TSS (Tuple Space Search) algorithm in Open vSwitch 2.x through 2.17.2 and 3.0.0 allows remote attackers to cause a denial of service (delays of legitimate traffic) via crafted packet data that requires excessive evaluation time within the packet classification algorithm for the MegaFlow cache, aka a Tuple Space Explosion (TSE) attack.
5.8
Moyen
CVE-2021-3905 2022-08-22 22h00 +00:00 A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments.
7.5
Haute
CVE-2020-27827 2021-03-17 23h00 +00:00 A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.
7.5
Haute
CVE-2020-35498 2021-02-10 23h00 +00:00 A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.
7.5
Haute
CVE-2017-14970 2017-10-01 18h00 +00:00 In lib/ofp-util.c in Open vSwitch (OvS) before 2.8.1, there are multiple memory leaks while parsing malformed OpenFlow group mod messages. NOTE: the vendor disputes the relevance of this report, stating "it can only be triggered by an OpenFlow controller, but OpenFlow controllers have much more direct and powerful ways to force Open vSwitch to allocate memory, such as by inserting flows into the flow table."
5.9
Moyen