CVE-2026-34956 Openvswitch: open vswitch: denial of service via malformed ftp epasv command
A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can send a specially crafted FTP stream with an EPASV command exceeding 255 characters. This heap access error can lead to a crash, resulting in a Denial of Service (DoS) for the affected system.
Problem types: cwe_id: CWE-120
description: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products: vendor: Red Hat
product: Fast Datapath for RHEL 7
cpes: cpe:/o:redhat:enterprise_linux:7::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 7
cpes: cpe:/o:redhat:enterprise_linux:7::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 7
cpes: cpe:/o:redhat:enterprise_linux:7::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 7
cpes: cpe:/o:redhat:enterprise_linux:7::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 7
cpes: cpe:/o:redhat:enterprise_linux:7::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 7
cpes: cpe:/o:redhat:enterprise_linux:7::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 7
cpes: cpe:/o:redhat:enterprise_linux:7::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 7
cpes: cpe:/o:redhat:enterprise_linux:7::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 8
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 8
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 8
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 8
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 8
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 8
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 8
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 8
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 8
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 8
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 9
cpes: cpe:/o:redhat:enterprise_linux:9::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 9
cpes: cpe:/o:redhat:enterprise_linux:9::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 9
cpes: cpe:/o:redhat:enterprise_linux:9::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 9
cpes: cpe:/o:redhat:enterprise_linux:9::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 9
cpes: cpe:/o:redhat:enterprise_linux:9::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 9
cpes: cpe:/o:redhat:enterprise_linux:9::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 9
cpes: cpe:/o:redhat:enterprise_linux:9::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 9
cpes: cpe:/o:redhat:enterprise_linux:9::fastdatapath
default_status: affected
vendor: Red Hat
product: Fast Datapath for RHEL 9
cpes: cpe:/o:redhat:enterprise_linux:9::fastdatapath
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 7
cpes: cpe:/o:redhat:enterprise_linux:7
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenStack Platform 13 (Queens)
cpes: cpe:/a:redhat:openstack:13
default_status: affected
vendor: Red Hat
product: Red Hat OpenStack Platform 13 (Queens)
cpes: cpe:/a:redhat:openstack:13
default_status: affected
vendor: Red Hat
product: Red Hat OpenStack Platform 13 (Queens)
cpes: cpe:/a:redhat:openstack:13
default_status: affected
vendor: Red Hat
product: Red Hat OpenStack Platform 16.2
cpes: cpe:/a:redhat:openstack:16.2
default_status: affected
vendor: Red Hat
product: Red Hat OpenStack Platform 16.2
cpes: cpe:/a:redhat:openstack:16.2
default_status: affected
vendor: Red Hat
product: Red Hat OpenStack Platform 17.1
cpes: cpe:/a:redhat:openstack:17.1
default_status: affected
vendor: Red Hat
product: Red Hat OpenStack Platform 17.1
cpes: cpe:/a:redhat:openstack:17.1
default_status: affected
vendor: Red Hat
product: Red Hat OpenStack Platform 18.0
cpes: cpe:/a:redhat:openstack:18.0
default_status: affected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: Red Hat would like to thank Seiji Sakurai for reporting this issue.
Published: 2026-05-05T15:45:04.638Z