CVE-2024-2182 Ovn: insufficient validation of bfd packets may lead to denial of service
A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service.
Problem types: cwe_id: CWE-346
description: Origin Validation Error
Affected products: default_status: unaffected
vendor: Red Hat
product: Fast Datapath for Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 7
cpes: cpe:/o:redhat:enterprise_linux:7::fastdatapath
default_status: unknown
vendor: Red Hat
product: Fast Datapath for RHEL 7
cpes: cpe:/o:redhat:enterprise_linux:7::fastdatapath
default_status: unknown
vendor: Red Hat
product: Fast Datapath for RHEL 7
cpes: cpe:/o:redhat:enterprise_linux:7::fastdatapath
default_status: unknown
vendor: Red Hat
product: Fast Datapath for RHEL 8
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
default_status: unknown
vendor: Red Hat
product: Fast Datapath for RHEL 8
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
default_status: unknown
vendor: Red Hat
product: Fast Datapath for RHEL 8
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
default_status: unknown
vendor: Red Hat
product: Fast Datapath for RHEL 8
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
default_status: unknown
vendor: Red Hat
product: Fast Datapath for RHEL 8
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
default_status: unknown
vendor: Red Hat
product: Fast Datapath for RHEL 9
cpes: cpe:/o:redhat:enterprise_linux:9::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 9
cpes: cpe:/o:redhat:enterprise_linux:9::fastdatapath
default_status: unknown
vendor: Red Hat
product: Fast Datapath for RHEL 9
cpes: cpe:/o:redhat:enterprise_linux:9::fastdatapath
default_status: unknown
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: Red Hat would like to thank Frode Nordahl (Canonical) for reporting this issue.
Published: 2024-03-12T16:18:31.829Z