CVE-2023-3966
Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet
Summary
Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet
Original description
The description as published by the source.
A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is enabled.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-3966 openvswitch Fixed in: 2.15.0+ds1-2+deb11u5
References
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- report bugzilla.redhat.com
- web access.redhat.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web packages.fedoraproject.org
- web repos.fedorapeople.org