PT-2023-9041 · Unknown+6 · Openvswitch+6

Alex Katz + 1 · Publicado 2023-10-06 · Atualizado 2026-01-26 · CVE-2023-5366

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Name of the Vulnerable Software and Affected Versions Open vSwitch (affected versions not specified)

Description A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses. The vulnerability is related to insufficient authentication of data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Verification of Data Authenticity

Enumeração de Fraquezas

CWE-345

Identificadores relacionados

ALT-PU-2024-10743

ALT-PU-2024-6293

AZL-31280

AZL-35087

BDU:2024-03244

CVE-2023-5366

DLA-3734-1

DSA-5640-1

OESA-2023-1732

OPENSUSE-SU-2023_4508-1

OPENSUSE-SU-2024:13657-1

RHSA-2024:1227

RHSA-2024:1234

RHSA-2024:1235

ROSA-SA-2025-2664

SUSE-SU-2023:4508-1

SUSE-SU-2023:4571-1

SUSE-SU-2023:4573-1

SUSE-SU-2023:4657-1

SUSE-SU-2023:4661-1

SUSE-SU-2023:4666-1

SUSE-SU-2023:4714-1

SUSE-SU-2023_4508-1

SUSE-SU-2023_4571-1

SUSE-SU-2023_4573-1

SUSE-SU-2023_4657-1

SUSE-SU-2023_4661-1

SUSE-SU-2023_4666-1

SUSE-SU-2023_4714-1

SUSE-SU-2026:0280-1

SUSE-SU-2026:0290-1

SUSE-SU-2026:20049-1

SUSE-SU-2026:20061-1

USN-6514-1

USN-6690-1

Produtos afetados

Alt Linux

Astra Linux

Linuxmint

Openvswitch

Red Os

Suse

Ubuntu

Referências · 81

• https://github.com/openvswitch/ovs/commit/d3f9eab1abbb6a11c2a166472c184f54fd740bf1 · Nota
• https://github.com/openvswitch/ovs/commit/a6c0a3deb268f34faef0062e2c05ece563d50ecb · Nota
• https://github.com/openvswitch/ovs/commit/e235a421fbdb0c70176e8a3bef13bf7e2056cbc1 · Nota
• https://github.com/openvswitch/ovs/commit/7570744c5add3a91b468c4ffa5bc73ef1f5bb18a · Nota
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1732 · Nota
• https://osv.dev/vulnerability/OESA-2023-1732 · Aviso do Fabricante
• https://bugzilla.suse.com/1212125 · Nota
• https://cve.org/CVERecord?id=CVE-2023-5366 · Nota de Segurança
• https://ubuntu.com/security/notices/USN-6514-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-5366 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2026/suse-su-20260290-1 · Nota
• https://osv.dev/vulnerability/USN-6690-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2026:0280-1 · Aviso do Fabricante
• https://t.me/cvenotify/74497 · Publicação no Telegram
• https://bugzilla.suse.com/1216002 · Nota