CVEvulnerability

CVE-2020-27827

7.5 HIGH Published 2021-03-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-03-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-400

Description

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Affected configurations

• lldpd project lldpd (< 1.0.8) • openvswitch openvswitch (>= 2.6.0 < 2.6.9) • openvswitch openvswitch (>= 2.7.0 < 2.7.12) • openvswitch openvswitch (>= 2.8.0 < 2.8.10) • openvswitch openvswitch (>= 2.9.0 < 2.9.8) • openvswitch openvswitch (>= 2.10.0 < 2.10.6) • openvswitch openvswitch (>= 2.11.0 < 2.11.5) • openvswitch openvswitch (>= 2.12.0 < 2.12.2) • openvswitch openvswitch (>= 2.13.0 < 2.13.2) • openvswitch openvswitch (>= 2.14.0 < 2.14.1) • redhat openshift container platform 4.0 • redhat openstack 10 • redhat openstack 13 • redhat virtualization 4.0 • redhat enterprise linux 7.0 • redhat enterprise linux 8.0 • fedoraproject fedora 33 • siemens simatic hmi unified comfort panels firmware (< 17) • siemens simatic net cp 1243-1 firmware • siemens simatic net cp 1243-8 irc firmware • siemens simatic net cp 1542sp-1 firmware • siemens simatic net cp 1542sp-1 irc firmware • siemens simatic net cp 1543-1 firmware • siemens simatic net cp 1543sp-1 firmware • siemens simatic net cp 1545-1 firmware • siemens tim 1531 irc firmware (< 2.2) • siemens sinumerik one firmware (< 2.0.1)

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References