PT-2024-19073 · Unknown+3 · Open Virtual Network+3
Frode Nordahl
·
Published
2024-03-05
·
Updated
2026-02-24
·
CVE-2024-2182
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Open Virtual Network (OVN) (affected versions not specified)
Description
A flaw was found in the Open Virtual Network (OVN) that can be exploited by an attacker to inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers. This can trigger a denial of service in OVN clusters where BFD is used between hypervisors for high availability.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Origin Validation Error
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Open Virtual Network
Ubuntu