Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 11 | openvswitch | 2.15.0+ds1-2+deb11u5 |
| Debian · 12 | openvswitch | 3.1.0-2+deb12u1 |
Vulnerabilities 2
-
High 7.5
Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet
A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is enabled.
-
High 7.1
Openvswitch don't match packets on nd_target field
A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field …