rpm package
suse/openvswitch&distro=SUSE Linux Enterprise Server 15 SP5-LTSS
pkg:rpm/suse/openvswitch&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-5367 | Hig | 8.6 | < 2.14.2-150400.24.35.1 | 2.14.2-150400.24.35.1 | Apr 24, 2026 | A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could cause the ovn-controller to read beyond the bounds of a packet. This out-of-bounds | |
| CVE-2026-5265 | Med | 6.5 | < 2.14.2-150400.24.35.1 | 2.14.2-150400.24.35.1 | Apr 24, 2026 | When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header's self-declared total length (ip_tot_len for IPv4, ip6_plen for IPv6) without validating it against the act | |
| CVE-2025-0650 | Hig | 8.1 | < 2.14.2-150400.24.26.1 | 2.14.2-150400.24.26.1 | Jan 23, 2025 | A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can l |
- affected < 2.14.2-150400.24.35.1fixed 2.14.2-150400.24.35.1
A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could cause the ovn-controller to read beyond the bounds of a packet. This out-of-bounds
- affected < 2.14.2-150400.24.35.1fixed 2.14.2-150400.24.35.1
When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header's self-declared total length (ip_tot_len for IPv4, ip6_plen for IPv6) without validating it against the act
- affected < 2.14.2-150400.24.26.1fixed 2.14.2-150400.24.26.1
A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can l