openvswitch

5 results · Clear filters · Feed

• Medium 6.5
  CVE-2026-46433

  lldpd: Heap OOB Read in VLAN Decapsulation memmove

  lldpd is an implementation of IEEE 802.1ab (LLDP). Prior to version 1.0.22, lldpd_decode() in src/daemon/lldpd.c strips 802.1Q VLAN tags from received Ethernet frames by calling memmove() to shift the frame payload 4 bytes left. The third argument (byte count…

  lldpd lldpd openvswitch lldpd Debian Ubuntu Alpine
  Jun 9, 2026
• Medium 6.5
  CVE-2026-36499

  A missing upper-bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an attacker with OVSDB w…

  openvswitch openvswitch Debian Ubuntu
  Jun 4, 2026
• Medium 5.9
  CVE-2026-34956

  Openvswitch: open vswitch: denial of service via malformed ftp epasv command

  A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can send a specially crafted FTP stream with an EPASV command exceeding 255 characters. This heap access e…

  Red Hat Red Hat Enterprise Linux 7 Red Hat OpenShift Container Platform 4 Red Hat OpenStack Platform 13 (Queens) Linux Debian Ubuntu
  May 5, 2026
• Medium 6.1
  CVE-2022-32166

  ovs - buffer over-read

  In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modificati…

  ovs ovs openvswitch openvswitch Debian Ubuntu
  Sep 28, 2022
• Medium 5.5
  CVE-2021-36980

  Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact…

  openvswitch openvswitch openvswitch Debian Ubuntu Alpine
  Jul 20, 2021