Red Hat Security Advisory: Red Hat OpenStack Platform 13.0 (openvswitch2.11) security update

Fixed packages 5

Vulnerabilities 2

• High 7.5
  CVE-2020-27827

  A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when a…

  openvswitch openvswitch openvswitch lldpd Debian Ubuntu Azure Linux Alpine
  Mar 18, 2021
• High 7.5
  CVE-2020-35498 Public exploit

  A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a ma…

  openvswitch openvswitch openvswitch Debian Ubuntu Alpine
  Feb 11, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1908845
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1921438
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1928901
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2456.json
• report
  https://access.redhat.com/security/cve/CVE-2020-27827
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-27827
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-27827
• article
  https://mail.openvswitch.org/pipermail/ovs-dev/2021-January/379471.html
• report
  https://access.redhat.com/security/cve/CVE-2020-35498
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-35498
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-35498
• article
  https://www.openwall.com/lists/oss-security/2021/02/10/4