USN-4691-1 — openvswitch vulnerabilities

Summary

Jonas Rudloff discovered that Open vSwitch incorrectly handled certain
malformed LLDP packets. A remote attacker could use this issue to cause
Open vSwitch to crash, resulting in a denial of service, or possibly
execute arbitrary code.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	openvswitch	2.5.9-0ubuntu0.16.04.2
Ubuntu · 18.04 LTS 18.04:LTS	openvswitch	2.9.7-0ubuntu0.18.04.2
Ubuntu · 20.04 LTS 20.04:LTS	openvswitch	2.13.1-0ubuntu0.20.04.3

Vulnerabilities 2

High 7.5

CVE-2020-27827

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when a…

openvswitch openvswitch openvswitch lldpd Debian Ubuntu Azure Linux Alpine

Mar 18, 2021
Unscored —

CVE-2015-8011

Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to…

openvswitch openvswitch openvswitch lldpd Debian Ubuntu Alpine

Jan 28, 2020

References

report
https://ubuntu.com/security/CVE-2015-8011
report
https://ubuntu.com/security/CVE-2020-27827

openvswitch vulnerabilities

Summary

Fixed packages 3

Vulnerabilities 2

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when a…

Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to…

References