← CVE Intelligence

CVE-2026-5367

Ovn: ovn: information disclosure via crafted dhcpv6 packets PUBLISHED

Description (CNA)

A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could cause the ovn-controller to read beyond the bounds of a packet. This out-of-bounds read can lead to the disclosure of sensitive information stored in heap memory, which is then returned to the attacker's virtual machine port.

Affected (CNA)

Vendor / productVersions
Red Hat / Fast Datapath for Red Hat Enterprise Linux 10unaffected 0:25.03.2-100.el10fdp before *
Red Hat / Fast Datapath for Red Hat Enterprise Linux 10unaffected 0:25.09.2-103.el10fdp before *
Red Hat / Fast Datapath for Red Hat Enterprise Linux 8unaffected 0:21.12.0-145.el8fdp before *
Red Hat / Fast Datapath for Red Hat Enterprise Linux 8unaffected 0:23.06.4-30.el8fdp before *
Red Hat / Fast Datapath for Red Hat Enterprise Linux 9unaffected 0:23.06.4-30.el9fdp before *
Red Hat / Fast Datapath for Red Hat Enterprise Linux 9unaffected 0:23.09.6-16.el9fdp before *
Red Hat / Fast Datapath for Red Hat Enterprise Linux 9unaffected 0:24.03.7-82.el9fdp before *
Red Hat / Fast Datapath for Red Hat Enterprise Linux 9unaffected 0:25.03.2-100.el9fdp before *
Red Hat / Fast Datapath for Red Hat Enterprise Linux 9unaffected 0:25.09.2-103.el9fdp before *
Red Hat / Fast Datapath for RHEL 8unaffected
Red Hat / Fast Datapath for RHEL 8unaffected
Red Hat / Fast Datapath for RHEL 8unaffected
Red Hat / Fast Datapath for RHEL 8affected
Red Hat / Fast Datapath for RHEL 9affected
Red Hat / Fast Datapath for RHEL 9affected
Red Hat / Red Hat OpenShift Container Platform 4unaffected
Red Hat / Red Hat OpenShift Container Platform 4unaffected
Red Hat / Red Hat OpenShift Container Platform 4unaffected
Red Hat / Red Hat OpenShift Container Platform 4unaffected
Red Hat / Red Hat OpenShift Container Platform 4affected
Red Hat / Red Hat OpenShift Container Platform 4unaffected
Red Hat / Red Hat OpenShift Container Platform 4affected
Red Hat / Red Hat OpenShift Container Platform 4affected
Red Hat / Red Hat OpenShift Container Platform 4affected

CWE

CWE-130

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could cause the ovn-controller to read beyond the bounds of a packet. This out-of-bounds read can lead to the disclosure of sensitive information stored in heap memory, which is then returned to the attacker's virtual machine port.