CVE-2024-2182CWE-346

CVE-2024-2182

Medium · published March 12, 2024

CVSS v3.1
6.5
EPSS
1%
Percentile
55.5
In the wild
Unconfirmed
What it is

A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00783 · 55.5th percentile
Weakness
CWE-346 · Origin Validation Error
Published
2024-03-12T21:15Z
References (32)
https://access.redhat.com/errata/RHSA-2024:1385 · [email protected]https://access.redhat.com/errata/RHSA-2024:1386 · [email protected]https://access.redhat.com/errata/RHSA-2024:1387 · [email protected]https://access.redhat.com/errata/RHSA-2024:1388 · [email protected]https://access.redhat.com/errata/RHSA-2024:1390 · [email protected]https://access.redhat.com/errata/RHSA-2024:1391 · [email protected]https://access.redhat.com/errata/RHSA-2024:1392 · [email protected]https://access.redhat.com/errata/RHSA-2024:1393 · [email protected]https://access.redhat.com/errata/RHSA-2024:1394 · [email protected]https://access.redhat.com/errata/RHSA-2024:4035 · [email protected]https://access.redhat.com/security/cve/CVE-2024-2182 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2267840 · [email protected]https://mail.openvswitch.org/pipermail/ovs-announce/2024-March/000346.html · [email protected]https://www.openwall.com/lists/oss-security/2024/03/12/5 · [email protected]http://www.openwall.com/lists/oss-security/2024/03/12/5 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:1385 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:1386 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:1387 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:1388 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:1390 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:1391 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:1392 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:1393 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:1394 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:4035 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/security/cve/CVE-2024-2182 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=2267840 · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/[email protected]/message/APR4GCVCMQD3DQUKXDNGIXCCYGE5V7IT/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/[email protected]/message/CB4N522FCS4XWAPUKRWZF6QZ657FCIDF/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/[email protected]/message/XRKXOOOKD56TY3JQVB45N3GCTX3EG4BV/ · af854a3a-2127-422b-91ae-364da2661108https://mail.openvswitch.org/pipermail/ovs-announce/2024-March/000346.html · af854a3a-2127-422b-91ae-364da2661108https://www.openwall.com/lists/oss-security/2024/03/12/5 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 12 MAR 16:18Z
    Ovn: insufficient validation of bfd packets may lead to denial of service
    cvelistv5