rpm package
suse/openvswitch&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4
pkg:rpm/suse/openvswitch&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4
Vulnerabilities (5)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-5367 | Hig | 8.6 | < 2.14.2-150400.24.35.1 | 2.14.2-150400.24.35.1 | Apr 24, 2026 | A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could cause the ovn-controller to read beyond the bounds of a packet. This out-of-bounds | |
| CVE-2026-5265 | Med | 6.5 | < 2.14.2-150400.24.35.1 | 2.14.2-150400.24.35.1 | Apr 24, 2026 | When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header's self-declared total length (ip_tot_len for IPv4, ip6_plen for IPv6) without validating it against the act | |
| CVE-2025-0650 | Hig | 8.1 | < 2.14.2-150400.24.26.1 | 2.14.2-150400.24.26.1 | Jan 23, 2025 | A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can l | |
| CVE-2023-3966 | — | < 2.14.2-150400.24.23.1 | 2.14.2-150400.24.23.1 | Feb 22, 2024 | A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is enabled. | ||
| CVE-2024-22563 | — | < 2.14.2-150400.24.20.1 | 2.14.2-150400.24.20.1 | Jan 19, 2024 | openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in openvswitch-2.17.8/lib/util.c. |
- affected < 2.14.2-150400.24.35.1fixed 2.14.2-150400.24.35.1
A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could cause the ovn-controller to read beyond the bounds of a packet. This out-of-bounds
- affected < 2.14.2-150400.24.35.1fixed 2.14.2-150400.24.35.1
When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header's self-declared total length (ip_tot_len for IPv4, ip6_plen for IPv6) without validating it against the act
- affected < 2.14.2-150400.24.26.1fixed 2.14.2-150400.24.26.1
A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can l
- CVE-2023-3966Feb 22, 2024affected < 2.14.2-150400.24.23.1fixed 2.14.2-150400.24.23.1
A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is enabled.
- CVE-2024-22563Jan 19, 2024affected < 2.14.2-150400.24.20.1fixed 2.14.2-150400.24.20.1
openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in openvswitch-2.17.8/lib/util.c.