CVE-2025-0650CWE-284

Ovn: egress acls may be bypassed via specially crafted udp packet

High · published January 23, 2025

CVSS v3.1
8.1
EPSS
1%
Percentile
58.4
In the wild
Unconfirmed
What it is

A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00870 · 58.4th percentile
Weakness
CWE-284 · Improper Access Control
Published
2025-01-23T16:34Z
EPSS history
Timeline
  • 23 JAN 16:34Z
    Ovn: egress acls may be bypassed via specially crafted udp packet
    cvelistv5