CVE-2021-3905

2022-08-2300:00:00

CWE-401

redhat

www.cve.org

open vswitch

memory leak

ip fragmentation

cve-2021-3905

attack

7.6 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.5%

JSON

A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "openvswitch (ovs)",
    "versions": [
      {
        "version": "Fixed in v2.17.0",
        "status": "affected"
      }
    ]
  }
]