Ovn: insufficient validation of bfd packets may lead to denial of service
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- ovn
From 20.03.0 · fixed in *
- ovn23.06
Version range not reported
- ovn22.12
Version range not reported
- ovn22.03
Version range not reported
- ovn23.03
Version range not reported
- ovn-2021
Version range not reported
- ovn23.09
Version range not reported
- ovn23.06
Version range not reported
- ovn22.12
Version range not reported
- ovn22.03
Version range not reported
- ovn23.03
Version range not reported
- ovn25.03
Version range not reported
- ovn25.09
Version range not reported
- ovn26.03
Version range not reported
- ovn2.11
Version range not reported
- ovn2.12
Version range not reported
- ovn2.13
Version range not reported
- ovn2.11
Version range not reported
- ovn2.12
Version range not reported
- ovn2.13
Version range not reported
- ovn22.06
Version range not reported
- ovn22.09
Version range not reported
- ovn-2021
Version range not reported
- ovn22.06
Version range not reported
- ovn22.09
Version range not reported
- ovn24.03
Version range not reported
- ovn24.09
Version range not reported
- ovn25.03
Version range not reported
- ovn25.09
Version range not reported
- ovn26.03
Version range not reported
- ovn22.06
Version range not reported
- ovn22.09
Version range not reported
- ovn22.12
Version range not reported
- ovn23.03
Version range not reported
- ovn23.06
Version range not reported
- ovn23.09
Version range not reported
- ovn24.03
Version range not reported
- ovn24.09
Version range not reported
- ovn2.11
Version range not reported