← Back

CVE-2020-35498

nvd nist
Published: Feb 11, 2021Modified: Apr 23, 2025

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Affected (13)

Openvswitch
1 product
Openvswitch
Debian
1 product
Debian Linux
Fedoraproject
1 product
Fedora
Configuration A
10 vulnerable
Vulnerable SoftwareAffected Versions
Openvswitch
Openvswitch
From 2.10.0 to 2.10.7
Openvswitch
From 2.11.0 to 2.11.6
Openvswitch
From 2.12.0 to 2.12.3
Openvswitch
From 2.13.0 to 2.13.3
Openvswitch
From 2.14.0 to 2.14.2
Openvswitch
From 2.5.0 to 2.5.12
Openvswitch
From 2.6.0 to 2.6.10
Openvswitch
From 2.7.0 to 2.7.13
Openvswitch
From 2.8.0 to 2.8.11
Openvswitch
From 2.9.0 to 2.9.9
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Debian Linux
Version 10.0
Debian Linux
Version 9.0
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Fedora
Version 33

Related CWEs

CWE-400
Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (12)

Source: secalert@redhat.com
Issue TrackingPatchThird Party Advisory
Source: secalert@redhat.com
Mailing ListThird Party Advisory
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Mailing ListPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchThird Party Advisory

Timeline

No history available yet.