CVE-2020-35498
11.02.2021, 18:15
A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.Enginsight
| Vendor | Product | Version |
|---|---|---|
| openvswitch | openvswitch | 2.5.0 ≤ 𝑥 < 2.5.12 |
| openvswitch | openvswitch | 2.6.0 ≤ 𝑥 < 2.6.10 |
| openvswitch | openvswitch | 2.7.0 ≤ 𝑥 < 2.7.13 |
| openvswitch | openvswitch | 2.8.0 ≤ 𝑥 < 2.8.11 |
| openvswitch | openvswitch | 2.9.0 ≤ 𝑥 < 2.9.9 |
| openvswitch | openvswitch | 2.10.0 ≤ 𝑥 < 2.10.7 |
| openvswitch | openvswitch | 2.11.0 ≤ 𝑥 < 2.11.6 |
| openvswitch | openvswitch | 2.12.0 ≤ 𝑥 < 2.12.3 |
| openvswitch | openvswitch | 2.13.0 ≤ 𝑥 < 2.13.3 |
| openvswitch | openvswitch | 2.14.0 ≤ 𝑥 < 2.14.2 |
| debian | debian_linux | 9.0 |
| debian | debian_linux | 10.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References