PT-2026-29690 · Unknown · Openvswitch

Seiji Sakurai · Published 2026-04-01 · Updated 2026-05-05 · CVE-2026-34956

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Open vSwitch (affected versions not specified)

Description An issue exists in Open vSwitch related to invalid memory access within the conntrack FTP algorithm. Specifically, crafted FTP payloads can trigger invalid memory accesses, potentially leading to a denial of service and possible remote code execution. This impacts the userspace implementation of conntrack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2026-34956

OESA-2026-1871

OESA-2026-1872

OESA-2026-1960

OESA-2026-1961

OESA-2026-1962

OESA-2026-2063

OPENSUSE-SU-2026:10534-1

SUSE-SU-2026:1439-1

SUSE-SU-2026:1440-1

SUSE-SU-2026:1482-1

SUSE-SU-2026:21250-1

Affected Products

Openvswitch

References · 36

• https://cve.org/CVERecord?id=CVE-2026-34956 · Security Note
• https://osv.dev/vulnerability/OESA-2026-1871 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-34956 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1962 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-34956 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2063 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10534-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1960 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-34956 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1439-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1872 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:21250-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34956 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1961 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1440-1 · Vendor Advisory