ALT-BU-2024-10824-1
Branch c10f1 update bulletin.
Package openvswitch updated to version 2.17.9-alt1 for branch c10f1 in task 354371.
Closed vulnerabilities
BDU:2024-01316
Уязвимость фильтра управления пакетами на основе потоков TC flower программного многоуровневого коммутатора Open vSwitch (OvS), позволяющая нарушителю вызвать отказ в обслуживании
BDU:2024-03244
Уязвимость программного многоуровневого коммутатора Open vSwitch (OvS), связанная с недостаточной проверкой подлинности данных, позволяющая нарушителю перенаправлять трафик ICMPv6 на произвольные IP-адреса
Modified: 2024-11-21
CVE-2023-3966
A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is enabled.
- https://access.redhat.com/security/cve/CVE-2023-3966
- https://access.redhat.com/security/cve/CVE-2023-3966
- RHBZ#2178363
- RHBZ#2178363
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LFZADABUDOFI2KZIRQBYFZCIKH55RGY3/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LFZADABUDOFI2KZIRQBYFZCIKH55RGY3/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VYYUBF6OW2JG7VOFEOROHXGSJCTES3QO/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VYYUBF6OW2JG7VOFEOROHXGSJCTES3QO/
Modified: 2024-11-21
CVE-2023-5366
A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses.
- http://www.openwall.com/lists/oss-security/2024/02/08/4
- http://www.openwall.com/lists/oss-security/2024/02/08/4
- https://access.redhat.com/security/cve/CVE-2023-5366
- https://access.redhat.com/security/cve/CVE-2023-5366
- RHBZ#2006347
- RHBZ#2006347
- https://lists.debian.org/debian-lts-announce/2024/02/msg00004.html
- https://lists.debian.org/debian-lts-announce/2024/02/msg00004.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LFZADABUDOFI2KZIRQBYFZCIKH55RGY3/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LFZADABUDOFI2KZIRQBYFZCIKH55RGY3/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VYYUBF6OW2JG7VOFEOROHXGSJCTES3QO/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VYYUBF6OW2JG7VOFEOROHXGSJCTES3QO/