This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-36980 →

DEBIAN-CVE-2021-36980

Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) dur...

Original description

The description as published by the source.

Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 openvswitch

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0+ds1-10"}]}]

Debian:13 openvswitch

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0+ds1-10"}]}]

Debian:14 openvswitch

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0+ds1-10"}]}]

References

advisory security-tracker.debian.org