CVEvulnerability
CVE-2024-2182
6.5 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2024-03-12
- Last modified
- 2026-10-19
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-346
Description
A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service.
Related
Weakness · CWE (1)
- CWE-346 Origin Validation Error weakness
References
- https://access.redhat.com/errata/RHSA-2024:1385 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:1386 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:1387 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:1388 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:1390 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:1391 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:1392 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:1393 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:1394 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:4035 access.redhat.com
- https://access.redhat.com/security/cve/CVE-2024-2182 access.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=2267840 bugzilla.redhat.com
- https://mail.openvswitch.org/pipermail/ovs-announce/2024-March/000346.html mail.openvswitch.org
- https://www.openwall.com/lists/oss-security/2024/03/12/5 www.openwall.com
- http://www.openwall.com/lists/oss-security/2024/03/12/5 www.openwall.com
- https://access.redhat.com/errata/RHSA-2024:1385 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:1386 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:1387 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:1388 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:1390 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:1391 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:1392 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:1393 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:1394 access.redhat.com
- https://access.redhat.com/errata/RHSA-2024:4035 access.redhat.com
- https://access.redhat.com/security/cve/CVE-2024-2182 access.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=2267840 bugzilla.redhat.com
- https://lists.fedoraproject.org/archives/list/[email protected]/message/APR4GCVCMQD3DQUKXDNGIXCCYGE5V7IT/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/CB4N522FCS4XWAPUKRWZF6QZ657FCIDF/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/XRKXOOOKD56TY3JQVB45N3GCTX3EG4BV/ lists.fedoraproject.org
- https://mail.openvswitch.org/pipermail/ovs-announce/2024-March/000346.html mail.openvswitch.org
- https://www.openwall.com/lists/oss-security/2024/03/12/5 www.openwall.com