CVEvulnerability

CVE-2025-0650

8.1 HIGH Published 2025-01-23 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-01-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-284

Description

A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References