CVE-2026-34956

Published: May 5, 2026Modified: Sep 1, 2026

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.2 / Impact: 3.6

Source: secalert@redhat.com (Secondary)

Description

A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can send a specially crafted FTP stream with an EPASV command exceeding 255 characters. This heap access error can lead to a crash, resulting in a Denial of Service (DoS) for the affected system.

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (3)

https://access.redhat.com/security/cve/CVE-2026-34956

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2453459

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2026/03/31/15

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.