VDB
BDU%3A2024-03244
BDU%3A2024-03244
PUBLISHED
CVSS 7.099999904632568 HIGH
Уязвимость программного многоуровневого коммутатора Open vSwitch (OvS), связанная с недостаточной проверкой подлинности данных, позволяющая нарушителю перенаправлять трафик ICMPv6 на произвольные IP-адреса
Risk Scores
CVSS 3.1
7.099999904632568
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | openvswitch | |
| Red Hat | Fast Datapath for RHEL 7 | |
| Red Hat | Fast Datapath for RHEL 8 | |
| Red Hat | Red Hat Virtualization 4 | |
| Red Hat | Fast Datapath for RHEL 9 | |
| Red Hat | Fast Datapath for RHEL 7 | |
| Red Hat | Red Hat OpenShift Container Platform 4 | |
| Red Hat | Fast Datapath for RHEL 7 | |
| Red Hat | Fast Datapath for RHEL 8 | |
| Red Hat | Red Hat OpenStack Platform 16.2 | |
| Red Hat | Red Hat OpenStack Platform 16.1 | |
| Red Hat | Fast Datapath for RHEL 8 | |
| Red Hat | Fast Datapath for RHEL 9 | |
| Red Hat | Fast Datapath for RHEL 8 | |
| Red Hat | Fast Datapath for RHEL 8 | |
| Red Hat | Red Hat OpenShift Container Platform 3.11 | |
| Red Hat | Fast Datapath for RHEL 8 | |
| Red Hat | Red Hat Enterprise Linux 7 | |
| Red Hat | Fast Datapath for RHEL 8 | |
| Fedora | Fedora |
…and 10 more
Timeline
- Oct 6, 2023 CVE Published
- Oct 6, 2023 PoC Published
- Jul 16, 2024 PoC Published
- Mar 5, 2025 CVE Updated
References
- https://github.com/openvswitch/ovs/commit/7570744c5add3a91b468c4ffa5bc73ef1f5bb18a url
- https://github.com/openvswitch/ovs/commit/a6c0a3deb268f34faef0062e2c05ece563d50ecb url
- https://github.com/openvswitch/ovs/commit/d3f9eab1abbb6a11c2a166472c184f54fd740bf1 url
- https://github.com/openvswitch/ovs/commit/e235a421fbdb0c70176e8a3bef13bf7e2056cbc1 url
- https://redos.red-soft.ru/support/secure/ url
- https://www.openwall.com/lists/oss-security/2024/02/08/4 url
- https://access.redhat.com/security/cve/CVE-2023-5366 url
- https://security-tracker.debian.org/tracker/CVE-2023-5366 url
- https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.10/ url
- https://wiki.astralinux.ru/astra-linux-se17-bulletin-2024-0830SE17 url
- https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47 url
- https://abf.rosa.ru/advisories/ROSA-SA-2025-2664 url
- http://repo.red-soft.ru/redos/7.3c/x86_64/updates/ advisory
- RHBZ#2006347 issue
- http://www.openwall.com/lists/oss-security/2024/02/08/4 url
- https://lists.debian.org/debian-lts-announce/2024/02/msg00004.html url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VYYUBF6OW2JG7VOFEOROHXGSJCTES3QO/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LFZADABUDOFI2KZIRQBYFZCIKH55RGY3/ url