PT-2026-33836 · Ovn · Ovn

Published 2026-04-20 · Updated 2026-06-01 · CVE-2026-5367

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OVN (affected versions not specified)

Description A flaw in OVN (Open Virtual Network) allows a remote attacker to cause the ovn-controller to perform an out-of-bounds read by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length. This heap over-read can lead to the disclosure of sensitive information stored in heap memory, which is then returned to the attacker's virtual machine port via DHCPv6 and ICMP responses.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-130

Related Identifiers

CVE-2026-5367

RHSA-2026:11694

RHSA-2026:11695

RHSA-2026:11696

RHSA-2026:11698

RHSA-2026:11700

RHSA-2026:11701

RHSA-2026:11702

Affected Products

Ovn

References · 25

• https://access.redhat.com/errata/RHSA-2026:11696 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-5367 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-5367 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-5367 · Security Note
• https://access.redhat.com/errata/RHSA-2026:11702 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-5367 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:11694 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:11701 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:11698 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-5367 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:22110 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:22111 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:11695 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-5367 · Security Note
• https://access.redhat.com/errata/RHSA-2026:11700 · Vendor Advisory