PT-2023-8636 · Unknown+6 · Openvswitch+6

Anten Skrabec + 1 · Publicado 2023-03-15 · Atualizado 2026-01-26 · CVE-2023-3966

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Open vSwitch (affected versions not specified)

Description A flaw in Open vSwitch is related to insufficient handling of exceptional states due to incorrect checking of Geneve packet metadata. This issue may allow a remote attacker to cause a denial of service if hardware offloading via the netlink path is enabled. The flaw is triggered by crafted Geneve packets and may result in invalid memory accesses.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Enumeração de Fraquezas

CWE-248

Identificadores relacionados

ALT-PU-2024-10743

ALT-PU-2024-6293

AZL-35089

BDU:2024-01316

CVE-2023-3966

DSA-5640-1

OESA-2024-1207

OPENSUSE-SU-2024:13725-1

RHSA-2024:1227

RHSA-2024:1234

RHSA-2024:1235

SUSE-SU-2024:0738-1

SUSE-SU-2024:0738-2

SUSE-SU-2024:0912-1

SUSE-SU-2024:0922-1

SUSE-SU-2024:0937-1

SUSE-SU-2024_0738-1

SUSE-SU-2024_0912-1

SUSE-SU-2024_0922-1

SUSE-SU-2024_0937-1

SUSE-SU-2026:0280-1

SUSE-SU-2026:0290-1

SUSE-SU-2026:20049-1

SUSE-SU-2026:20061-1

USN-6690-1

Produtos afetados

Alt Linux

Astra Linux

Linuxmint

Openvswitch

Red Os

Suse

Ubuntu

Referências · 70

• https://github.com/openvswitch/ovs/commit/91e621bd5abab19954bec09c7d27c59acdf607b1 · Nota
• https://github.com/openvswitch/ovs/commit/935cd1d574c6f432a451df8941374ffb36d767d9 · Nota
• https://github.com/openvswitch/ovs/commit/2cfbcd5247ed0fd941c1ebb9f4adb952b67fe13a · Nota
• https://github.com/openvswitch/ovs/commit/a468645c6d33 · Nota
• https://github.com/openvswitch/ovs/commit/b8657dada9641fbd2bd3a3f882e0862448d60910 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2024:0738-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1212125 · Nota
• https://bdu.fstec.ru/vul/2024-01316 · Nota de Segurança
• https://suse.com/support/update/announcement/2026/suse-su-20260290-1 · Nota
• https://osv.dev/vulnerability/USN-6690-1 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2024/suse-su-20240922-1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-3966 · Nota de Segurança
• https://osv.dev/vulnerability/SUSE-SU-2026:0280-1 · Aviso do Fabricante
• https://t.me/cvenotify/122549 · Publicação no Telegram
• https://bugzilla.suse.com/1216002 · Nota