CyberSecBulletin

Openvswitch vulnerabilities

We track 2 vulnerabilities in Openvswitch products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 22, 2024.

2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score

Latest Openvswitch vulnerabilities

  • 7.5 High severity

    openvswitch: Uncaught Exception

    CVE-2023-3966OpenvswitchEPSS 1.25%

    A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is enabled.

  • 8.2 High severity

    openvswitch: Always-Incorrect Control Flow Implementation

    CVE-2023-1668OpenvswitchEPSS 1.22%

    A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matchi