CVE-2023-5366 PUBLISHED CVSS 7.099999904632568 HIGH

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses.

EPSS 0.02% · 5.2th percentile

Risk Scores

CVSS v3.1
7.099999904632568
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
EPSS Score
0.02%
5.2th percentile

Affected Products

VendorProductVersions
Red HatFast Datapath for RHEL 8
Red HatFast Datapath for RHEL 7
Red HatFast Datapath for RHEL 7
Red HatRed Hat OpenStack Platform 16.1
redhatfast_datapath
redhatvirtualization4.0
Red HatRed Hat Virtualization 4
redhatenterprise_linux7.0
Red HatFast Datapath for RHEL 8
Red HatFast Datapath for RHEL 9
Red HatFast Datapath for RHEL 8
Red HatRed Hat OpenShift Container Platform 4
Red HatRed Hat OpenShift Container Platform 4
Red HatFast Datapath for RHEL 7
Red HatRed Hat OpenShift Container Platform 4
redhatopenshift_container_platform4.0
openvswitchopenvswitch0
Red HatRed Hat Virtualization 4
Red HatFast Datapath for RHEL 8
Red HatFast Datapath for RHEL 7

…and 14 more

Timeline

References

Open in Interactive Console →