PT-2021-7727 · Unknown+4 · Openvswitch+4

Published 2021-02-23 · Updated 2024-06-15 · CVE-2021-36980

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions Open vSwitch versions 2.11.0 through 2.15.0

Description The issue is related to a use-after-free error in the decode NXAST RAW ENCAP() function of Open vSwitch. This error occurs during the decoding of a RAW ENCAP action and can be exploited by a remote attacker to execute arbitrary code. The decode NXAST RAW ENCAP() function is called from ofpact decode and ofpacts decode.

Recommendations For Open vSwitch versions 2.11.0 through 2.15.0, consider disabling the decode NXAST RAW ENCAP() function as a temporary workaround until a patch is available. Restrict access to the ofpact decode and ofpacts decode functions to minimize the risk of exploitation. Avoid using the RAW ENCAP action in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2021-3392

ALT-PU-2021-3569

AZL-6781

BDU:2023-02001

CVE-2021-36980

OESA-2021-1304

OPENSUSE-SU-2022_3096-1

OPENSUSE-SU-2022_3099-1

OPENSUSE-SU-2022_3116-1

OPENSUSE-SU-2024:11898-1

RHSA-2021:3758

RHSA-2021:3942

SUSE-SU-2022:3096-1

SUSE-SU-2022:3098-1

SUSE-SU-2022:3099-1

SUSE-SU-2022:3116-1

SUSE-SU-2022_3098-1

SUSE-SU-2022_3099-1

SUSE-SU-2022_3116-1

SUSE-SU-2023:1795-1

SUSE-SU-2023:2360-1

SUSE-SU-2023_2360-1

USN-5065-1

Affected Products

Alt Linux

Linuxmint

Openvswitch

Suse

Ubuntu

References · 49

• https://github.com/openvswitch/ovs/commit/9926637a80d0d243dbf9c49761046895e9d1a8e2 · Patch
• https://github.com/openvswitch/ovs/commit/65c61b0c23a0d474696d7b1cea522a5016a8aeb3 · Patch
• https://github.com/openvswitch/ovs/commit/38744b1bcb022c611712527f039722115300f58f · Patch
• https://github.com/openvswitch/ovs/commit/8ce8dc34b5f73b30ce0c1869af9947013c3c6575 · Patch
• https://github.com/openvswitch/ovs/commit/77cccc74deede443e8b9102299efc869a52b65b2 · Patch
• https://github.com/openvswitch/ovs/commit/6d67310f4d2524b466b98f05ebccc1add1e8cf35 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2022:3098-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:1795-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5065-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-36980 · Security Note
• https://bdu.fstec.ru/vul/2023-02001 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-36980 · Vendor Advisory
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27851 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2022:3116-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-36980 · Vendor Advisory