Summary
Marius Berntsberg, Trygve Vea, Tore Anderson, Rodolfo Alonso, Jay Faulkner,
and Brian Haley discovered that OVN incorrectly handled certain crafted UDP
packets. A remote attacker could possibly use this issue to bypass egress
ACL rules.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | ovn | 20.03.2-0ubuntu0.20.04.6 |
| Ubuntu · 22.04 LTS 22.04:LTS | ovn | 22.03.3-0ubuntu0.22.04.5 |
| Ubuntu · 24.04 LTS 24.04:LTS | ovn | 24.03.2-0ubuntu0.24.04.2 |
Vulnerabilities 1
-
High 8.1
Ovn: egress acls may be bypassed via specially crafted udp packet
A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configu…
References
-
report
https://ubuntu.com/security/CVE-2025-0650