(RHSA-2024:1227) Important: openvswitch3.1 security update

2024-03-0717:57:27

access.redhat.com

open vswitch

network bridging

openflow protocol

security update

geneve metadata

cve-2023-3966

cvss score

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

Low

EPSS

Percentile

15.5%

JSON

Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.

Security Fix(es):

openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet (CVE-2023-3966)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9x86_64openvswitch3.1< 3.1.0-88.el9fdpopenvswitch3.1-3.1.0-88.el9fdp.x86_64.rpm
RedHat9ppc64leopenvswitch3.1-debugsource< 3.1.0-88.el9fdpopenvswitch3.1-debugsource-3.1.0-88.el9fdp.ppc64le.rpm
RedHat9s390xopenvswitch3.1-debugsource< 3.1.0-88.el9fdpopenvswitch3.1-debugsource-3.1.0-88.el9fdp.s390x.rpm
RedHat9aarch64python3-openvswitch3.1< 3.1.0-88.el9fdppython3-openvswitch3.1-3.1.0-88.el9fdp.aarch64.rpm
RedHat9x86_64openvswitch3.1-devel< 3.1.0-88.el9fdpopenvswitch3.1-devel-3.1.0-88.el9fdp.x86_64.rpm
RedHat9s390xopenvswitch3.1-devel< 3.1.0-88.el9fdpopenvswitch3.1-devel-3.1.0-88.el9fdp.s390x.rpm
RedHat9ppc64leopenvswitch3.1< 3.1.0-88.el9fdpopenvswitch3.1-3.1.0-88.el9fdp.ppc64le.rpm
RedHat9aarch64openvswitch3.1-debugsource< 3.1.0-88.el9fdpopenvswitch3.1-debugsource-3.1.0-88.el9fdp.aarch64.rpm
RedHat9aarch64python3-openvswitch3.1-debuginfo< 3.1.0-88.el9fdppython3-openvswitch3.1-debuginfo-3.1.0-88.el9fdp.aarch64.rpm
RedHat9noarchopenvswitch3.1-test< 3.1.0-88.el9fdpopenvswitch3.1-test-3.1.0-88.el9fdp.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	x86_64	openvswitch3.1	< 3.1.0-88.el9fdp	openvswitch3.1-3.1.0-88.el9fdp.x86_64.rpm
RedHat	9	ppc64le	openvswitch3.1-debugsource	< 3.1.0-88.el9fdp	openvswitch3.1-debugsource-3.1.0-88.el9fdp.ppc64le.rpm
RedHat	9	s390x	openvswitch3.1-debugsource	< 3.1.0-88.el9fdp	openvswitch3.1-debugsource-3.1.0-88.el9fdp.s390x.rpm
RedHat	9	aarch64	python3-openvswitch3.1	< 3.1.0-88.el9fdp	python3-openvswitch3.1-3.1.0-88.el9fdp.aarch64.rpm
RedHat	9	x86_64	openvswitch3.1-devel	< 3.1.0-88.el9fdp	openvswitch3.1-devel-3.1.0-88.el9fdp.x86_64.rpm
RedHat	9	s390x	openvswitch3.1-devel	< 3.1.0-88.el9fdp	openvswitch3.1-devel-3.1.0-88.el9fdp.s390x.rpm
RedHat	9	ppc64le	openvswitch3.1	< 3.1.0-88.el9fdp	openvswitch3.1-3.1.0-88.el9fdp.ppc64le.rpm
RedHat	9	aarch64	openvswitch3.1-debugsource	< 3.1.0-88.el9fdp	openvswitch3.1-debugsource-3.1.0-88.el9fdp.aarch64.rpm
RedHat	9	aarch64	python3-openvswitch3.1-debuginfo	< 3.1.0-88.el9fdp	python3-openvswitch3.1-debuginfo-3.1.0-88.el9fdp.aarch64.rpm
RedHat	9	noarch	openvswitch3.1-test	< 3.1.0-88.el9fdp	openvswitch3.1-test-3.1.0-88.el9fdp.noarch.rpm