Summary
It was discovered that Open vSwitch incorrectly handled decoding RAW_ENCAP
actions. A remote attacker could use this issue to cause Open vSwitch to
crash, resulting in a denial of service, or possibly execute arbitrary
code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | openvswitch | 2.13.3-0ubuntu0.20.04.2 |
Vulnerabilities 1
-
Medium 5.5
Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact…
References
-
report
https://ubuntu.com/security/CVE-2021-36980