Summary
It was discovered that Open vSwitch did not correctly handle OpenFlow
rules for ICMPv6 Neighbour Advertisement packets. A local attacker could
possibly use this issue to redirect traffic to arbitrary IP addresses.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | openvswitch | 2.13.8-0ubuntu1.3 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | openvswitch | 2.9.8-0ubuntu0.18.04.5+esm1 |
Vulnerabilities 1
-
High 7.1
Openvswitch don't match packets on nd_target field
A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field …
References
-
report
https://ubuntu.com/security/CVE-2023-5366