← CVE Intelligence

CVE-2023-3966

Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet PUBLISHED

Description (CNA)

A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is enabled.

Affected (CNA)

Vendor / productVersions
n/a / openvswitchunaffected 3.1.0
Red Hat / Fast Datapath for RHEL 7affected
Red Hat / Fast Datapath for RHEL 7unknown
Red Hat / Fast Datapath for RHEL 7unknown
Red Hat / Fast Datapath for RHEL 7unknown
Red Hat / Fast Datapath for RHEL 7affected
Red Hat / Fast Datapath for RHEL 8unknown
Red Hat / Fast Datapath for RHEL 8unknown
Red Hat / Fast Datapath for RHEL 8affected
Red Hat / Fast Datapath for RHEL 8affected
Red Hat / Fast Datapath for RHEL 8unknown
Red Hat / Fast Datapath for RHEL 8affected
Red Hat / Fast Datapath for RHEL 8affected
Red Hat / Fast Datapath for RHEL 9affected
Red Hat / Fast Datapath for RHEL 9unknown
Red Hat / Fast Datapath for RHEL 9affected
Red Hat / Fast Datapath for RHEL 9affected
Red Hat / Red Hat Enterprise Linux 7affected
Red Hat / Red Hat OpenShift Container Platform 3.11unaffected
RDO / OpenStack RDOaffected
Fedora / Fedoraaffected

CWE

CWE-248

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.