PT-2022-8294 · Unknown+2 · Openvswitch+2

Published 2022-09-08 · Updated 2023-10-22 · CVE-2019-25076

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Open vSwitch versions 2.x through 2.17.2 Open vSwitch version 3.0.0

Description The issue allows remote attackers to cause a denial of service, resulting in delays of legitimate traffic. This is achieved via crafted packet data that requires excessive evaluation time within the packet classification algorithm for the MegaFlow cache, also known as a Tuple Space Explosion (TSE) attack.

Recommendations For Open vSwitch versions 2.x through 2.17.2, update to a version later than 2.17.2 to resolve the issue. For Open vSwitch version 3.0.0, update to a version later than 3.0.0 to resolve the issue. As a temporary workaround, consider restricting access to the MegaFlow cache to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

ALT-PU-2023-1745

ALT-PU-2023-1806

AZL-10905

CVE-2019-25076

ROSA-SA-2023-2262

Affected Products

Alt Linux

Debian

Openvswitch

References · 14

• 🔥 https://youtube.com/watch?v=DSC3m-Bww64 · Exploit
• 🔥 https://youtube.com/watch?v=5cHpzVK0D28 · Exploit
• 🔥 https://sites.google.com/view/tuple-space-explosion · Exploit
• https://security-tracker.debian.org/tracker/CVE-2019-25076 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-25076 · Security Note
• https://ubuntu.com/security/CVE-2019-25076 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-25076 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-25076 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-25076 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-10905 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-25076 · Vendor Advisory
• https://t.me/cvenotify/35914 · Telegram Post
• https://arxiv.org/abs/2011.09107 · Note
• https://dl.acm.org/citation.cfm?doid=3359989.3365431 · Note