ovn23.09 vulnerabilities

CVEs whose affected-version data names the ovn23.09 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-2182Medium· 6.5

2y ago

Ovn: insufficient validation of bfd packets may lead to denial of service

A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual m…

▾ SunlitRed Hat · ovnEPSS 0.78%via CVEORG