CVEvulnerability
CVE-2021-3905
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-08-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-401
Description
A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments.
Affected configurations
• openvswitch openvswitch (< 2.17.0)
• redhat enterprise linux fast datapath 7.0
• redhat enterprise linux fast datapath 8.0
• canonical ubuntu linux 21.10
• fedoraproject fedora 35
Related
Weakness · CWE (1)
- CWE-401 Missing Release of Memory after Effective Lifetime weakness
References
- https://access.redhat.com/security/cve/CVE-2021-3905 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2019692 Issue Tracking, Patch, Third Party Advisory
- https://github.com/openvswitch/ovs-issues/issues/226 Exploit, Issue Tracking, Patch, Third Party Advisory
- https://github.com/openvswitch/ovs/commit/803ed12e31b0377c37d7aa8c94b3b92f2081e349 Patch, Third Party Advisory
- https://security.gentoo.org/glsa/202311-16 security.gentoo.org
- https://ubuntu.com/security/CVE-2021-3905 Patch, Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2021-3905 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2019692 Issue Tracking, Patch, Third Party Advisory
- https://github.com/openvswitch/ovs-issues/issues/226 Exploit, Issue Tracking, Patch, Third Party Advisory
- https://github.com/openvswitch/ovs/commit/803ed12e31b0377c37d7aa8c94b3b92f2081e349 Patch, Third Party Advisory
- https://security.gentoo.org/glsa/202311-16 security.gentoo.org
- https://ubuntu.com/security/CVE-2021-3905 Patch, Third Party Advisory