Summary
It was discovered that OVN incorrectly enabled OVS Bidirectional Forwarding
Detection on logical ports. A remote attacker could possibly use this issue
to disrupt traffic.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | ovn | 20.03.2-0ubuntu0.20.04.5 |
| Ubuntu · 22.04 LTS 22.04:LTS | ovn | 22.03.3-0ubuntu0.22.04.2 |
Vulnerabilities 1
-
Medium 6.5
Ovn: insufficient validation of bfd packets may lead to denial of service
A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers,…
References
-
report
https://ubuntu.com/security/CVE-2024-2182