Search

Find a vulnerability

Search criteria

    14 vulnerabilities found for Fast Datapath for Red Hat Enterprise Linux 9 by Red Hat

    CVE-2026-5367 (GCVE-0-2026-5367)

    Vulnerability from nvd – Published: 2026-04-24 12:25 – Updated: 2026-06-30 12:10
    VLAI
    Title
    Ovn: ovn: information disclosure via crafted dhcpv6 packets
    Summary
    A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could cause the ovn-controller to read beyond the bounds of a packet. This out-of-bounds read can lead to the disclosure of sensitive information stored in heap memory, which is then returned to the attacker's virtual machine port.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-130 - Improper Handling of Length Parameter Inconsistency
    Assigner
    Impacted products
    Vendor Product Version
    Red Hat Fast Datapath for Red Hat Enterprise Linux 10 Unaffected: 0:25.03.2-100.el10fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 10 Unaffected: 0:25.09.2-103.el10fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:21.12.0-145.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:23.06.4-30.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:23.06.4-30.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:23.09.6-16.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:24.03.7-82.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:25.03.2-100.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:25.09.2-103.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 8     cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 9     cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 10     cpe:/o:redhat:enterprise_linux:10::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Date Public
    2026-04-13 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2026-04-24T13:37:14.640Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "http://www.openwall.com/lists/oss-security/2026/04/20/3"
              },
              {
                "url": "http://www.openwall.com/lists/oss-security/2026/04/20/5"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-5367",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-24T16:58:51.939172Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-24T18:17:08.701Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10::fastdatapath"
                ],
                "defaultStatus": "affected",
                "product": "Fast Datapath for Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
                ],
                "defaultStatus": "affected",
                "product": "Fast Datapath for Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
                ],
                "defaultStatus": "affected",
                "product": "Fast Datapath for Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
                ],
                "defaultStatus": "affected",
                "product": "Fast Datapath for RHEL 8",
                "vendor": "Red Hat"
              },
              {
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
                ],
                "defaultStatus": "affected",
                "product": "Fast Datapath for RHEL 9",
                "vendor": "Red Hat"
              },
              {
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-13T00:00:00.000Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could cause the ovn-controller to read beyond the bounds of a packet. This out-of-bounds read can lead to the disclosure of sensitive information stored in heap memory, which is then returned to the attacker\u0027s virtual machine port."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 8.6,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "NONE",
                  "privilegesRequired": "NONE",
                  "scope": "CHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-130",
                    "description": "Improper Handling of Length Parameter Inconsistency",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-06-30T12:10:32.848Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-5367"
              },
              {
                "name": "RHBZ#2455863",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455863"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5367.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22110"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22111"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:11694"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:11695"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:11696"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:11698"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:11700"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:11701"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:11702"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:22110: Fast Datapath for Red Hat Enterprise Linux 10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22111: Fast Datapath for Red Hat Enterprise Linux 10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:11694: Fast Datapath for Red Hat Enterprise Linux 8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:11695: Fast Datapath for Red Hat Enterprise Linux 8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:11696: Fast Datapath for Red Hat Enterprise Linux 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:11698: Fast Datapath for Red Hat Enterprise Linux 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:11700: Fast Datapath for Red Hat Enterprise Linux 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:11701: Fast Datapath for Red Hat Enterprise Linux 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:11702: Fast Datapath for Red Hat Enterprise Linux 9"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-04-07T08:10:53.507Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-13T00:00:00.000Z",
                "value": "Made public."
              }
            ],
            "title": "ovn: OVN: Information disclosure via crafted DHCPv6 packets",
            "workarounds": [
              {
                "lang": "en",
                "value": "The only potential mitigation is to disable the DHCPv6 feature for\nworkloads attached to OVN logical ports, e.g.:\n\novn-nbctl clear logical_switch_port \u003cworkload-port\u003e dhcpv6_options.\n\nWe do not recommend mitigating the vulnerability this way because it\nwill also disable legitimate DHCPv6 traffic originating from\nworkloads connected to logical switch ports."
              }
            ],
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:10::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn25.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 10",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:25.03.2-100.el10fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:10::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn25.09",
              "product": "Fast Datapath for Red Hat Enterprise Linux 10",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:25.09.2-103.el10fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn-2021",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:21.12.0-145.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.06",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.06.4-30.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.06",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.06.4-30.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.09",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.09.6-16.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn24.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:24.03.7-82.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn25.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:25.03.2-100.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn25.09",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:25.09.2-103.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn2.11",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn2.12",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn2.13",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.03",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn-2021",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.03",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn22.06",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn22.09",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn22.12",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn23.03",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.06",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn23.09",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn24.03",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn24.09",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn25.03",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            }
          ],
          "datePublic": "2026-04-13T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could cause the ovn-controller to read beyond the bounds of a packet. This out-of-bounds read can lead to the disclosure of sensitive information stored in heap memory, which is then returned to the attacker\u0027s virtual machine port."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Important"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 8.6,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-130",
                  "description": "Improper Handling of Length Parameter Inconsistency",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-06-01T02:48:19.206Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHSA-2026:11694",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11694"
            },
            {
              "name": "RHSA-2026:11695",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11695"
            },
            {
              "name": "RHSA-2026:11696",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11696"
            },
            {
              "name": "RHSA-2026:11698",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11698"
            },
            {
              "name": "RHSA-2026:11700",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11700"
            },
            {
              "name": "RHSA-2026:11701",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11701"
            },
            {
              "name": "RHSA-2026:11702",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11702"
            },
            {
              "name": "RHSA-2026:22110",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:22110"
            },
            {
              "name": "RHSA-2026:22111",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:22111"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2026-5367"
            },
            {
              "name": "RHBZ#2455863",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455863"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-04-07T08:10:53.507Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2026-04-13T00:00:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Ovn: ovn: information disclosure via crafted dhcpv6 packets",
          "workarounds": [
            {
              "lang": "en",
              "value": "The only potential mitigation is to disable the DHCPv6 feature for\nworkloads attached to OVN logical ports, e.g.:\n\novn-nbctl clear logical_switch_port \u003cworkload-port\u003e dhcpv6_options.\n\nWe do not recommend mitigating the vulnerability this way because it\nwill also disable legitimate DHCPv6 traffic originating from\nworkloads connected to logical switch ports."
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_redhatCweChain": "CWE-130: Improper Handling of Length Parameter Inconsistency"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2026-5367",
        "datePublished": "2026-04-24T12:25:05.024Z",
        "dateReserved": "2026-04-01T18:39:05.229Z",
        "dateUpdated": "2026-06-30T12:10:32.848Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-5265 (GCVE-0-2026-5265)

    Vulnerability from nvd – Published: 2026-04-24 12:25 – Updated: 2026-06-17 22:00
    VLAI
    Title
    Ovn: ovn: heap over-read in icmp error response generation
    Summary
    When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header's self-declared total length (ip_tot_len for IPv4, ip6_plen for IPv6) without validating it against the actual packet buffer size. A VM can send a short packet with an inflated IP length field that triggers an ICMP error (e.g., by hitting a reject ACL), causing ovn-controller to read heap memory beyond the valid packet data and include it in the ICMP response sent back to the VM.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-130 - Improper Handling of Length Parameter Inconsistency
    Assigner
    Impacted products
    Vendor Product Version
    Red Hat Fast Datapath for Red Hat Enterprise Linux 10 Unaffected: 0:25.03.2-100.el10fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 10 Unaffected: 0:25.09.2-103.el10fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:21.12.0-145.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:23.06.4-30.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:23.06.4-30.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:23.09.6-16.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:24.03.7-82.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:25.03.2-100.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:25.09.2-103.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 7     cpe:/o:redhat:enterprise_linux:7::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 8     cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 9     cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Date Public
    2026-04-06 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2026-04-24T13:37:06.533Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "http://www.openwall.com/lists/oss-security/2026/04/20/2"
              },
              {
                "url": "http://www.openwall.com/lists/oss-security/2026/04/20/4"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-5265",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-24T18:19:52.126823Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-24T18:21:26.388Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:10::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn25.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 10",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:25.03.2-100.el10fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:10::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn25.09",
              "product": "Fast Datapath for Red Hat Enterprise Linux 10",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:25.09.2-103.el10fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn-2021",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:21.12.0-145.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.06",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.06.4-30.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.06",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.06.4-30.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.09",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.09.6-16.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn24.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:24.03.7-82.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn25.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:25.03.2-100.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn25.09",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:25.09.2-103.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn2.11",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn2.12",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn2.13",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn2.11",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn2.12",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn2.13",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.03",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.06",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.09",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.12",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.03",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn-2021",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.03",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.06",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.09",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.12",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.03",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn24.09",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            }
          ],
          "datePublic": "2026-04-06T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header\u0027s self-declared total length (ip_tot_len for IPv4, ip6_plen for IPv6) without validating it against the actual packet buffer size. A VM can send a short packet with an inflated IP length field that triggers an ICMP error (e.g., by hitting a reject ACL), causing ovn-controller to read heap memory beyond the valid packet data and include it in the ICMP response sent back to the VM."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Moderate"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-130",
                  "description": "Improper Handling of Length Parameter Inconsistency",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-06-17T22:00:07.950Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHSA-2026:11694",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11694"
            },
            {
              "name": "RHSA-2026:11695",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11695"
            },
            {
              "name": "RHSA-2026:11696",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11696"
            },
            {
              "name": "RHSA-2026:11698",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11698"
            },
            {
              "name": "RHSA-2026:11700",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11700"
            },
            {
              "name": "RHSA-2026:11701",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11701"
            },
            {
              "name": "RHSA-2026:11702",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11702"
            },
            {
              "name": "RHSA-2026:22110",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:22110"
            },
            {
              "name": "RHSA-2026:22111",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:22111"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2026-5265"
            },
            {
              "name": "RHBZ#2453458",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453458"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-03-24T00:00:00.000Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2026-04-06T00:00:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Ovn: ovn: heap over-read in icmp error response generation",
          "workarounds": [
            {
              "lang": "en",
              "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_redhatCweChain": "CWE-130: Improper Handling of Length Parameter Inconsistency"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2026-5265",
        "datePublished": "2026-04-24T12:25:06.808Z",
        "dateReserved": "2026-03-31T17:33:09.225Z",
        "dateUpdated": "2026-06-17T22:00:07.950Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2025-0650 (GCVE-0-2025-0650)

    Vulnerability from nvd – Published: 2025-01-23 16:34 – Updated: 2025-11-20 07:25
    VLAI
    Title
    Ovn: egress acls may be bypassed via specially crafted udp packet
    Summary
    A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-284 - Improper Access Control
    Assigner
    References
    URL Tags
    https://access.redhat.com/errata/RHSA-2025:1083 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1084 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1085 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1086 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1087 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1088 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1089 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1090 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1091 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1092 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1093 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1094 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1095 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1096 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1097 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/security/cve/CVE-2025-0650 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2339537 issue-trackingx_refsource_REDHAT
    https://www.openwall.com/lists/oss-security/2025/…
    http://www.openwall.com/lists/oss-security/2025/0…
    Impacted products
    Vendor Product Version
    Unaffected: 22.03.8 (semver)
    Unaffected: 24.03.5 (semver)
    Unaffected: 24.09.2 (semver)
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:22.03.7-11.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:22.06.0-273.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:22.09.2-86.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:22.12.1-107.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:23.03.3-22.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:23.06.4-26.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:22.03.7-11.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:22.06.0-273.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:22.09.2-86.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:22.12.1-107.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:23.03.3-22.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:23.06.4-26.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:23.09.6-12.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:24.03.4-53.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:24.09.1-66.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Date Public
    2024-01-21 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2025-01-23T18:03:31.666Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "http://www.openwall.com/lists/oss-security/2025/01/22/11"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-0650",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-01-23T17:00:24.397376Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-02-12T20:41:29.401Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://github.com/ovn-org/ovn",
              "defaultStatus": "unknown",
              "packageName": "ovn",
              "versions": [
                {
                  "status": "unaffected",
                  "version": "22.03.8",
                  "versionType": "semver"
                },
                {
                  "status": "unaffected",
                  "version": "24.03.5",
                  "versionType": "semver"
                },
                {
                  "status": "unaffected",
                  "version": "24.09.2",
                  "versionType": "semver"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.03.7-11.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.06",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.06.0-273.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.09",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.09.2-86.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.12",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.12.1-107.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.03.3-22.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.06",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.06.4-26.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.03.7-11.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.06",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.06.0-273.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.09",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.09.2-86.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.12",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.12.1-107.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.03.3-22.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.06",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.06.4-26.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.09",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.09.6-12.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn24.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:24.03.4-53.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn24.09",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:24.09.1-66.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn22.06",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn22.09",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn22.12",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn23.03",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.06",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn23.09",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn24.03",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn24.09",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            }
          ],
          "datePublic": "2024-01-21T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Important"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-284",
                  "description": "Improper Access Control",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2025-11-20T07:25:53.629Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHSA-2025:1083",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1083"
            },
            {
              "name": "RHSA-2025:1084",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1084"
            },
            {
              "name": "RHSA-2025:1085",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1085"
            },
            {
              "name": "RHSA-2025:1086",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1086"
            },
            {
              "name": "RHSA-2025:1087",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1087"
            },
            {
              "name": "RHSA-2025:1088",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1088"
            },
            {
              "name": "RHSA-2025:1089",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1089"
            },
            {
              "name": "RHSA-2025:1090",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1090"
            },
            {
              "name": "RHSA-2025:1091",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1091"
            },
            {
              "name": "RHSA-2025:1092",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1092"
            },
            {
              "name": "RHSA-2025:1093",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1093"
            },
            {
              "name": "RHSA-2025:1094",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1094"
            },
            {
              "name": "RHSA-2025:1095",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1095"
            },
            {
              "name": "RHSA-2025:1096",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1096"
            },
            {
              "name": "RHSA-2025:1097",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1097"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2025-0650"
            },
            {
              "name": "RHBZ#2339537",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2339537"
            },
            {
              "url": "https://www.openwall.com/lists/oss-security/2025/01/22/5"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2025-01-22T15:45:40.119Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2024-01-21T00:00:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Ovn: egress acls may be bypassed via specially crafted udp packet",
          "workarounds": [
            {
              "lang": "en",
              "value": "Red Hat Product Security has not identified any mitigations at this time. We recommend updating to a known patched version of OVN."
            }
          ],
          "x_redhatCweChain": "CWE-284: Improper Access Control"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2025-0650",
        "datePublished": "2025-01-23T16:34:31.390Z",
        "dateReserved": "2025-01-22T15:37:30.389Z",
        "dateUpdated": "2025-11-20T07:25:53.629Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2024-11614 (GCVE-0-2024-11614)

    Vulnerability from nvd – Published: 2024-12-18 08:30 – Updated: 2025-11-20 00:59
    VLAI
    Title
    Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library
    Summary
    An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash the hypervisor's vSwitch by forging Virtio descriptors to cause out-of-bounds reads. This flaw allows an attacker with a malicious VM using a virtio driver to cause the vhost-user side to crash by sending a packet with a Tx checksum offload request and an invalid csum_start offset.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    URL Tags
    https://access.redhat.com/errata/RHSA-2025:0208 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:0209 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:0210 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:0211 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:0220 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:0221 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:0222 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:3963 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:3964 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:3965 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:3970 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/security/cve/CVE-2024-11614 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2327955 issue-trackingx_refsource_REDHAT
    http://www.openwall.com/lists/oss-security/2024/12/17/3
    Impacted products
    Vendor Product Version
    Affected: 21.05 , < 21.11-4 (semver)
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:3.1.0-159.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:3.1.0-149.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:3.3.0-92.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:3.4.0-48.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8 Unaffected: 0:23.11-2.el8_10 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:8::appstream
        cpe:/a:redhat:enterprise_linux:8::crb
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Unaffected: 0:21.11-3.el8_6 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:8.6::appstream
        cpe:/a:redhat:rhel_tus:8.6::appstream
        cpe:/a:redhat:rhel_aus:8.6::appstream
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service Unaffected: 0:21.11-3.el8_6 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:8.6::appstream
        cpe:/a:redhat:rhel_tus:8.6::appstream
        cpe:/a:redhat:rhel_aus:8.6::appstream
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions Unaffected: 0:21.11-3.el8_6 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:8.6::appstream
        cpe:/a:redhat:rhel_tus:8.6::appstream
        cpe:/a:redhat:rhel_aus:8.6::appstream
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support Unaffected: 0:21.11-4.el8_8 , < * (rpm)
        cpe:/a:redhat:rhel_eus:8.8::appstream
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 2:23.11-2.el9_5 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9::appstream
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Unaffected: 2:21.11-3.el9_0 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.0::appstream
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support Unaffected: 2:22.11-4.el9_2 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.2::appstream
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support Unaffected: 2:23.11-2.el9_4 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.4::appstream
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 7     cpe:/o:redhat:enterprise_linux:7::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 8     cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 9     cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Date Public
    2024-12-17 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-12-18T09:03:01.520Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "http://www.openwall.com/lists/oss-security/2024/12/17/3"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-11614",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-12-18T14:47:13.057559Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-12-18T14:48:14.956Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://git.dpdk.org/dpdk-stable/",
              "defaultStatus": "unaffected",
              "packageName": "dpdk",
              "versions": [
                {
                  "lessThan": "21.11-4",
                  "status": "affected",
                  "version": "21.05",
                  "versionType": "semver"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "openvswitch3.1",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:3.1.0-159.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "openvswitch3.1",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:3.1.0-149.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "openvswitch3.3",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:3.3.0-92.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "openvswitch3.4",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:3.4.0-48.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:enterprise_linux:8::appstream",
                "cpe:/a:redhat:enterprise_linux:8::crb"
              ],
              "defaultStatus": "affected",
              "packageName": "dpdk",
              "product": "Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.11-2.el8_10",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_e4s:8.6::appstream",
                "cpe:/a:redhat:rhel_tus:8.6::appstream",
                "cpe:/a:redhat:rhel_aus:8.6::appstream"
              ],
              "defaultStatus": "affected",
              "packageName": "dpdk",
              "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:21.11-3.el8_6",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_e4s:8.6::appstream",
                "cpe:/a:redhat:rhel_tus:8.6::appstream",
                "cpe:/a:redhat:rhel_aus:8.6::appstream"
              ],
              "defaultStatus": "affected",
              "packageName": "dpdk",
              "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:21.11-3.el8_6",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_e4s:8.6::appstream",
                "cpe:/a:redhat:rhel_tus:8.6::appstream",
                "cpe:/a:redhat:rhel_aus:8.6::appstream"
              ],
              "defaultStatus": "affected",
              "packageName": "dpdk",
              "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:21.11-3.el8_6",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_eus:8.8::appstream"
              ],
              "defaultStatus": "affected",
              "packageName": "dpdk",
              "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:21.11-4.el8_8",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:enterprise_linux:9::appstream"
              ],
              "defaultStatus": "affected",
              "packageName": "dpdk",
              "product": "Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "2:23.11-2.el9_5",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_e4s:9.0::appstream"
              ],
              "defaultStatus": "affected",
              "packageName": "dpdk",
              "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "2:21.11-3.el9_0",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_eus:9.2::appstream"
              ],
              "defaultStatus": "affected",
              "packageName": "dpdk",
              "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "2:22.11-4.el9_2",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_eus:9.4::appstream"
              ],
              "defaultStatus": "affected",
              "packageName": "dpdk",
              "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "2:23.11-2.el9_4",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "dpdk",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch2.10",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch2.11",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch2.12",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch2.11",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch2.12",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch2.13",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch2.15",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch2.16",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch2.17",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch2.17",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch3.0",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch3.2",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch2.17",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch3.0",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch3.1",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch3.3",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            }
          ],
          "datePublic": "2024-12-17T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "An out-of-bounds read vulnerability was found in DPDK\u0027s Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash the hypervisor\u0027s vSwitch by forging Virtio descriptors to cause out-of-bounds reads. This flaw allows an attacker with a malicious VM using a virtio driver to cause the vhost-user side to crash by sending a packet with a Tx checksum offload request and an invalid csum_start offset."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Important"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_0": {
                "attackComplexity": "LOW",
                "attackVector": "ADJACENT_NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.4,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
                "version": "3.0"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-125",
                  "description": "Out-of-bounds Read",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2025-11-20T00:59:36.216Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHSA-2025:0208",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0208"
            },
            {
              "name": "RHSA-2025:0209",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0209"
            },
            {
              "name": "RHSA-2025:0210",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0210"
            },
            {
              "name": "RHSA-2025:0211",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0211"
            },
            {
              "name": "RHSA-2025:0220",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0220"
            },
            {
              "name": "RHSA-2025:0221",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0221"
            },
            {
              "name": "RHSA-2025:0222",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0222"
            },
            {
              "name": "RHSA-2025:3963",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:3963"
            },
            {
              "name": "RHSA-2025:3964",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:3964"
            },
            {
              "name": "RHSA-2025:3965",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:3965"
            },
            {
              "name": "RHSA-2025:3970",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:3970"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2024-11614"
            },
            {
              "name": "RHBZ#2327955",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2327955"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2024-11-22T00:00:00.000Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2024-12-17T00:00:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library",
          "x_redhatCweChain": "CWE-125: Out-of-bounds Read"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2024-11614",
        "datePublished": "2024-12-18T08:30:49.729Z",
        "dateReserved": "2024-11-22T04:21:45.124Z",
        "dateUpdated": "2025-11-20T00:59:36.216Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2024-52337 (GCVE-0-2024-52337)

    Vulnerability from nvd – Published: 2024-11-26 15:21 – Updated: 2026-06-26 01:03
    VLAI
    Title
    Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method
    Summary
    A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick the administrator. The quotes '' are usually used in TuneD logs citing raw user input, so there will always be the ' character ending the spoofed input, and the administrator can easily overlook this. This logged string is later used in logging and in the output of utilities, for example, `tuned-adm get_instances` or other third-party programs that use Tuned's D-Bus interface for such operations.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-20 - Improper Input Validation
    Assigner
    Impacted products
    Vendor Product Version
    Affected: 2.23.0 , < 2.24.1 (semver)
    Red Hat Fast Datapath for Red Hat Enterprise Linux 7 Unaffected: 0:2.11.0-5.el7fdp.2 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:7::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:2.24.0-2.1.20240819gitc082797f.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:2.24.0-2.1.20240819gitc082797f.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support Unaffected: 0:2.11.0-13.el7_9 , < * (rpm)
        cpe:/a:redhat:rhel_extras_rt_els:7
        cpe:/a:redhat:rhel_extras_sap_els:7
        cpe:/a:redhat:rhel_extras_sap_hana_els:7
        cpe:/o:redhat:rhel_els:7
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8 Unaffected: 0:2.22.1-5.el8_10 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:8::appstream
        cpe:/a:redhat:enterprise_linux:8::nfv
        cpe:/a:redhat:enterprise_linux:8::realtime
        cpe:/a:redhat:enterprise_linux:8::sap
        cpe:/a:redhat:enterprise_linux:8::sap_hana
        cpe:/o:redhat:enterprise_linux:8::baseos
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Unaffected: 0:2.20.0-1.el8_4.2 , < * (rpm)
        cpe:/a:redhat:rhel_aus:8.4::appstream
        cpe:/a:redhat:rhel_e4s:8.4::appstream
        cpe:/a:redhat:rhel_e4s:8.4::sap
        cpe:/a:redhat:rhel_e4s:8.4::sap_hana
        cpe:/a:redhat:rhel_tus:8.4::appstream
        cpe:/a:redhat:rhel_tus:8.4::nfv
        cpe:/a:redhat:rhel_tus:8.4::realtime
        cpe:/o:redhat:rhel_aus:8.4::baseos
        cpe:/o:redhat:rhel_e4s:8.4::baseos
        cpe:/o:redhat:rhel_tus:8.4::baseos
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8.4 Telecommunications Update Service Unaffected: 0:2.20.0-1.el8_4.2 , < * (rpm)
        cpe:/a:redhat:rhel_aus:8.4::appstream
        cpe:/a:redhat:rhel_e4s:8.4::appstream
        cpe:/a:redhat:rhel_e4s:8.4::sap
        cpe:/a:redhat:rhel_e4s:8.4::sap_hana
        cpe:/a:redhat:rhel_tus:8.4::appstream
        cpe:/a:redhat:rhel_tus:8.4::nfv
        cpe:/a:redhat:rhel_tus:8.4::realtime
        cpe:/o:redhat:rhel_aus:8.4::baseos
        cpe:/o:redhat:rhel_e4s:8.4::baseos
        cpe:/o:redhat:rhel_tus:8.4::baseos
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions Unaffected: 0:2.20.0-1.el8_4.2 , < * (rpm)
        cpe:/a:redhat:rhel_aus:8.4::appstream
        cpe:/a:redhat:rhel_e4s:8.4::appstream
        cpe:/a:redhat:rhel_e4s:8.4::sap
        cpe:/a:redhat:rhel_e4s:8.4::sap_hana
        cpe:/a:redhat:rhel_tus:8.4::appstream
        cpe:/a:redhat:rhel_tus:8.4::nfv
        cpe:/a:redhat:rhel_tus:8.4::realtime
        cpe:/o:redhat:rhel_aus:8.4::baseos
        cpe:/o:redhat:rhel_e4s:8.4::baseos
        cpe:/o:redhat:rhel_tus:8.4::baseos
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Unaffected: 0:2.20.0-1.el8_6.2 , < * (rpm)
        cpe:/a:redhat:rhel_aus:8.6::appstream
        cpe:/a:redhat:rhel_e4s:8.6::appstream
        cpe:/a:redhat:rhel_e4s:8.6::nfv
        cpe:/a:redhat:rhel_e4s:8.6::sap
        cpe:/a:redhat:rhel_e4s:8.6::sap_hana
        cpe:/a:redhat:rhel_tus:8.6::appstream
        cpe:/a:redhat:rhel_tus:8.6::nfv
        cpe:/a:redhat:rhel_tus:8.6::realtime
        cpe:/o:redhat:rhel_aus:8.6::baseos
        cpe:/o:redhat:rhel_e4s:8.6::baseos
        cpe:/o:redhat:rhel_tus:8.6::baseos
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service Unaffected: 0:2.20.0-1.el8_6.2 , < * (rpm)
        cpe:/a:redhat:rhel_aus:8.6::appstream
        cpe:/a:redhat:rhel_e4s:8.6::appstream
        cpe:/a:redhat:rhel_e4s:8.6::nfv
        cpe:/a:redhat:rhel_e4s:8.6::sap
        cpe:/a:redhat:rhel_e4s:8.6::sap_hana
        cpe:/a:redhat:rhel_tus:8.6::appstream
        cpe:/a:redhat:rhel_tus:8.6::nfv
        cpe:/a:redhat:rhel_tus:8.6::realtime
        cpe:/o:redhat:rhel_aus:8.6::baseos
        cpe:/o:redhat:rhel_e4s:8.6::baseos
        cpe:/o:redhat:rhel_tus:8.6::baseos
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions Unaffected: 0:2.20.0-1.el8_6.2 , < * (rpm)
        cpe:/a:redhat:rhel_aus:8.6::appstream
        cpe:/a:redhat:rhel_e4s:8.6::appstream
        cpe:/a:redhat:rhel_e4s:8.6::nfv
        cpe:/a:redhat:rhel_e4s:8.6::sap
        cpe:/a:redhat:rhel_e4s:8.6::sap_hana
        cpe:/a:redhat:rhel_tus:8.6::appstream
        cpe:/a:redhat:rhel_tus:8.6::nfv
        cpe:/a:redhat:rhel_tus:8.6::realtime
        cpe:/o:redhat:rhel_aus:8.6::baseos
        cpe:/o:redhat:rhel_e4s:8.6::baseos
        cpe:/o:redhat:rhel_tus:8.6::baseos
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support Unaffected: 0:2.20.0-2.el8_8.1 , < * (rpm)
        cpe:/a:redhat:rhel_eus:8.8::appstream
        cpe:/a:redhat:rhel_eus:8.8::nfv
        cpe:/a:redhat:rhel_eus:8.8::realtime
        cpe:/a:redhat:rhel_eus:8.8::sap
        cpe:/a:redhat:rhel_eus:8.8::sap_hana
        cpe:/o:redhat:rhel_eus:8.8::baseos
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 0:2.24.0-2.el9_5 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9::appstream
        cpe:/a:redhat:enterprise_linux:9::nfv
        cpe:/a:redhat:enterprise_linux:9::realtime
        cpe:/a:redhat:enterprise_linux:9::sap
        cpe:/a:redhat:enterprise_linux:9::sap_hana
        cpe:/o:redhat:enterprise_linux:9::baseos
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support Unaffected: 0:2.20.0-3.el9_2 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.2::appstream
        cpe:/a:redhat:rhel_eus:9.2::nfv
        cpe:/a:redhat:rhel_eus:9.2::realtime
        cpe:/a:redhat:rhel_eus:9.2::sap
        cpe:/a:redhat:rhel_eus:9.2::sap_hana
        cpe:/o:redhat:rhel_eus:9.2::baseos
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support Unaffected: 0:2.22.1-3.el9_4 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.4::appstream
        cpe:/a:redhat:rhel_eus:9.4::nfv
        cpe:/a:redhat:rhel_eus:9.4::realtime
        cpe:/a:redhat:rhel_eus:9.4::sap
        cpe:/a:redhat:rhel_eus:9.4::sap_hana
        cpe:/o:redhat:rhel_eus:9.4::baseos
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10     cpe:/o:redhat:enterprise_linux:10
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 6     cpe:/o:redhat:enterprise_linux:6
    Create a notification for this product.
    Date Public
    2024-11-26 12:00
    Credits
    Red Hat would like to thank Matthias Gerstner (SUSE Security Team) for reporting this issue.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-52337",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-11-26T15:57:55.472014Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-11-26T15:58:21.678Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "providerMetadata": {
              "dateUpdated": "2024-11-29T04:33:54.110Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "https://www.openwall.com/lists/oss-security/2024/11/28/2"
              },
              {
                "url": "https://security.opensuse.org/2024/11/26/tuned-instance-create.html"
              }
            ],
            "title": "CVE Program Container",
            "x_generator": {
              "engine": "ADPogram 0.0.1"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://github.com/redhat-performance/tuned",
              "defaultStatus": "unaffected",
              "packageName": "tuned",
              "versions": [
                {
                  "lessThan": "2.24.1",
                  "status": "affected",
                  "version": "2.23.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Fast Datapath for Red Hat Enterprise Linux 7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.11.0-5.el7fdp.2",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.24.0-2.1.20240819gitc082797f.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.24.0-2.1.20240819gitc082797f.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_extras_rt_els:7",
                "cpe:/a:redhat:rhel_extras_sap_els:7",
                "cpe:/a:redhat:rhel_extras_sap_hana_els:7",
                "cpe:/o:redhat:rhel_els:7"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.11.0-13.el7_9",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_extras_rt_els:7",
                "cpe:/a:redhat:rhel_extras_sap_els:7",
                "cpe:/a:redhat:rhel_extras_sap_hana_els:7",
                "cpe:/o:redhat:rhel_els:7"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.11.0-13.el7_9",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:enterprise_linux:8::appstream",
                "cpe:/a:redhat:enterprise_linux:8::nfv",
                "cpe:/a:redhat:enterprise_linux:8::realtime",
                "cpe:/a:redhat:enterprise_linux:8::sap",
                "cpe:/a:redhat:enterprise_linux:8::sap_hana",
                "cpe:/o:redhat:enterprise_linux:8::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.22.1-5.el8_10",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:enterprise_linux:8::appstream",
                "cpe:/a:redhat:enterprise_linux:8::nfv",
                "cpe:/a:redhat:enterprise_linux:8::realtime",
                "cpe:/a:redhat:enterprise_linux:8::sap",
                "cpe:/a:redhat:enterprise_linux:8::sap_hana",
                "cpe:/o:redhat:enterprise_linux:8::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.22.1-5.el8_10",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_aus:8.4::appstream",
                "cpe:/a:redhat:rhel_e4s:8.4::appstream",
                "cpe:/a:redhat:rhel_e4s:8.4::sap",
                "cpe:/a:redhat:rhel_e4s:8.4::sap_hana",
                "cpe:/a:redhat:rhel_tus:8.4::appstream",
                "cpe:/a:redhat:rhel_tus:8.4::nfv",
                "cpe:/a:redhat:rhel_tus:8.4::realtime",
                "cpe:/o:redhat:rhel_aus:8.4::baseos",
                "cpe:/o:redhat:rhel_e4s:8.4::baseos",
                "cpe:/o:redhat:rhel_tus:8.4::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.20.0-1.el8_4.2",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_aus:8.4::appstream",
                "cpe:/a:redhat:rhel_e4s:8.4::appstream",
                "cpe:/a:redhat:rhel_e4s:8.4::sap",
                "cpe:/a:redhat:rhel_e4s:8.4::sap_hana",
                "cpe:/a:redhat:rhel_tus:8.4::appstream",
                "cpe:/a:redhat:rhel_tus:8.4::nfv",
                "cpe:/a:redhat:rhel_tus:8.4::realtime",
                "cpe:/o:redhat:rhel_aus:8.4::baseos",
                "cpe:/o:redhat:rhel_e4s:8.4::baseos",
                "cpe:/o:redhat:rhel_tus:8.4::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.20.0-1.el8_4.2",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_aus:8.4::appstream",
                "cpe:/a:redhat:rhel_e4s:8.4::appstream",
                "cpe:/a:redhat:rhel_e4s:8.4::sap",
                "cpe:/a:redhat:rhel_e4s:8.4::sap_hana",
                "cpe:/a:redhat:rhel_tus:8.4::appstream",
                "cpe:/a:redhat:rhel_tus:8.4::nfv",
                "cpe:/a:redhat:rhel_tus:8.4::realtime",
                "cpe:/o:redhat:rhel_aus:8.4::baseos",
                "cpe:/o:redhat:rhel_e4s:8.4::baseos",
                "cpe:/o:redhat:rhel_tus:8.4::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.20.0-1.el8_4.2",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_aus:8.6::appstream",
                "cpe:/a:redhat:rhel_e4s:8.6::appstream",
                "cpe:/a:redhat:rhel_e4s:8.6::nfv",
                "cpe:/a:redhat:rhel_e4s:8.6::sap",
                "cpe:/a:redhat:rhel_e4s:8.6::sap_hana",
                "cpe:/a:redhat:rhel_tus:8.6::appstream",
                "cpe:/a:redhat:rhel_tus:8.6::nfv",
                "cpe:/a:redhat:rhel_tus:8.6::realtime",
                "cpe:/o:redhat:rhel_aus:8.6::baseos",
                "cpe:/o:redhat:rhel_e4s:8.6::baseos",
                "cpe:/o:redhat:rhel_tus:8.6::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.20.0-1.el8_6.2",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_aus:8.6::appstream",
                "cpe:/a:redhat:rhel_e4s:8.6::appstream",
                "cpe:/a:redhat:rhel_e4s:8.6::nfv",
                "cpe:/a:redhat:rhel_e4s:8.6::sap",
                "cpe:/a:redhat:rhel_e4s:8.6::sap_hana",
                "cpe:/a:redhat:rhel_tus:8.6::appstream",
                "cpe:/a:redhat:rhel_tus:8.6::nfv",
                "cpe:/a:redhat:rhel_tus:8.6::realtime",
                "cpe:/o:redhat:rhel_aus:8.6::baseos",
                "cpe:/o:redhat:rhel_e4s:8.6::baseos",
                "cpe:/o:redhat:rhel_tus:8.6::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.20.0-1.el8_6.2",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_aus:8.6::appstream",
                "cpe:/a:redhat:rhel_e4s:8.6::appstream",
                "cpe:/a:redhat:rhel_e4s:8.6::nfv",
                "cpe:/a:redhat:rhel_e4s:8.6::sap",
                "cpe:/a:redhat:rhel_e4s:8.6::sap_hana",
                "cpe:/a:redhat:rhel_tus:8.6::appstream",
                "cpe:/a:redhat:rhel_tus:8.6::nfv",
                "cpe:/a:redhat:rhel_tus:8.6::realtime",
                "cpe:/o:redhat:rhel_aus:8.6::baseos",
                "cpe:/o:redhat:rhel_e4s:8.6::baseos",
                "cpe:/o:redhat:rhel_tus:8.6::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.20.0-1.el8_6.2",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_eus:8.8::appstream",
                "cpe:/a:redhat:rhel_eus:8.8::nfv",
                "cpe:/a:redhat:rhel_eus:8.8::realtime",
                "cpe:/a:redhat:rhel_eus:8.8::sap",
                "cpe:/a:redhat:rhel_eus:8.8::sap_hana",
                "cpe:/o:redhat:rhel_eus:8.8::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.20.0-2.el8_8.1",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:enterprise_linux:9::appstream",
                "cpe:/a:redhat:enterprise_linux:9::nfv",
                "cpe:/a:redhat:enterprise_linux:9::realtime",
                "cpe:/a:redhat:enterprise_linux:9::sap",
                "cpe:/a:redhat:enterprise_linux:9::sap_hana",
                "cpe:/o:redhat:enterprise_linux:9::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.24.0-2.el9_5",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:enterprise_linux:9::appstream",
                "cpe:/a:redhat:enterprise_linux:9::nfv",
                "cpe:/a:redhat:enterprise_linux:9::realtime",
                "cpe:/a:redhat:enterprise_linux:9::sap",
                "cpe:/a:redhat:enterprise_linux:9::sap_hana",
                "cpe:/o:redhat:enterprise_linux:9::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.24.0-2.el9_5",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_eus:9.2::appstream",
                "cpe:/a:redhat:rhel_eus:9.2::nfv",
                "cpe:/a:redhat:rhel_eus:9.2::realtime",
                "cpe:/a:redhat:rhel_eus:9.2::sap",
                "cpe:/a:redhat:rhel_eus:9.2::sap_hana",
                "cpe:/o:redhat:rhel_eus:9.2::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.20.0-3.el9_2",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_eus:9.4::appstream",
                "cpe:/a:redhat:rhel_eus:9.4::nfv",
                "cpe:/a:redhat:rhel_eus:9.4::realtime",
                "cpe:/a:redhat:rhel_eus:9.4::sap",
                "cpe:/a:redhat:rhel_eus:9.4::sap_hana",
                "cpe:/o:redhat:rhel_eus:9.4::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.22.1-3.el9_4",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:10"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 10",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:6"
              ],
              "defaultStatus": "unknown",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 6",
              "vendor": "Red Hat"
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "Red Hat would like to thank Matthias Gerstner (SUSE Security Team) for reporting this issue."
            }
          ],
          "datePublic": "2024-11-26T12:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the \u0027evil\u0027 the attacker could mimic a valid TuneD log line and trick the administrator. The quotes \u0027\u0027 are usually used in TuneD logs citing raw user input, so there will always be the \u0027 character ending the spoofed input, and the administrator can easily overlook this. This logged string is later used in logging and in the output of utilities, for example, `tuned-adm get_instances` or other third-party programs that use Tuned\u0027s D-Bus interface for such operations."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Moderate"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-20",
                  "description": "Improper Input Validation",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-06-26T01:03:11.731Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHSA-2024:10381",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:10381"
            },
            {
              "name": "RHSA-2024:10384",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:10384"
            },
            {
              "name": "RHSA-2024:11161",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:11161"
            },
            {
              "name": "RHSA-2025:0195",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0195"
            },
            {
              "name": "RHSA-2025:0327",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0327"
            },
            {
              "name": "RHSA-2025:0368",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0368"
            },
            {
              "name": "RHSA-2025:0879",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0879"
            },
            {
              "name": "RHSA-2025:0880",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0880"
            },
            {
              "name": "RHSA-2025:0881",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0881"
            },
            {
              "name": "RHSA-2025:1785",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1785"
            },
            {
              "name": "RHSA-2025:1802",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1802"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2024-52337"
            },
            {
              "name": "RHBZ#2324541",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2324541"
            },
            {
              "url": "https://github.com/redhat-performance/tuned/releases/tag/v2.24.1"
            },
            {
              "url": "https://security.opensuse.org/2024/11/26/tuned-instance-create.html"
            },
            {
              "url": "https://www.openwall.com/lists/oss-security/2024/11/28/1"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2024-11-08T12:56:07.615Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2024-11-26T12:00:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method",
          "workarounds": [
            {
              "lang": "en",
              "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_redhatCweChain": "CWE-20: Improper Input Validation"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2024-52337",
        "datePublished": "2024-11-26T15:21:17.538Z",
        "dateReserved": "2024-11-08T13:09:39.005Z",
        "dateUpdated": "2026-06-26T01:03:11.731Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2024-52336 (GCVE-0-2024-52336)

    Vulnerability from nvd – Published: 2024-11-26 15:21 – Updated: 2026-06-26 00:51
    VLAI
    Title
    Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root
    Summary
    A script injection vulnerability was identified in the Tuned package. The `instance_create()` D-Bus function can be called by locally logged-in users without authentication. This flaw allows a local non-privileged user to execute a D-Bus call with `script_pre` or `script_post` options that permit arbitrary scripts with their absolute paths to be passed. These user or attacker-controlled executable scripts or programs could then be executed by Tuned with root privileges that could allow attackers to local privilege escalation.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-269 - Improper Privilege Management
    Assigner
    Impacted products
    Vendor Product Version
    Affected: 2.23.0 , < 2.24.1 (semver)
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:2.24.0-2.1.20240819gitc082797f.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:2.24.0-2.1.20240819gitc082797f.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 0:2.24.0-2.el9_5 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9::appstream
        cpe:/a:redhat:enterprise_linux:9::nfv
        cpe:/a:redhat:enterprise_linux:9::realtime
        cpe:/a:redhat:enterprise_linux:9::sap
        cpe:/a:redhat:enterprise_linux:9::sap_hana
        cpe:/o:redhat:enterprise_linux:9::baseos
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 7     cpe:/o:redhat:enterprise_linux:7::fastdatapath
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10     cpe:/o:redhat:enterprise_linux:10
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 6     cpe:/o:redhat:enterprise_linux:6
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 7     cpe:/o:redhat:enterprise_linux:7
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    Create a notification for this product.
    Date Public
    2024-11-26 12:00
    Credits
    Red Hat would like to thank Matthias Gerstner (SUSE Security Team) for reporting this issue.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-52336",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-11-26T16:22:02.290977Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-11-26T16:22:12.371Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "providerMetadata": {
              "dateUpdated": "2024-11-29T04:32:53.450Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "https://www.openwall.com/lists/oss-security/2024/11/28/2"
              },
              {
                "url": "https://security.opensuse.org/2024/11/26/tuned-instance-create.html"
              }
            ],
            "title": "CVE Program Container",
            "x_generator": {
              "engine": "ADPogram 0.0.1"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://github.com/redhat-performance/tuned",
              "defaultStatus": "unaffected",
              "packageName": "tuned",
              "versions": [
                {
                  "lessThan": "2.24.1",
                  "status": "affected",
                  "version": "2.23.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.24.0-2.1.20240819gitc082797f.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.24.0-2.1.20240819gitc082797f.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:enterprise_linux:9::appstream",
                "cpe:/a:redhat:enterprise_linux:9::nfv",
                "cpe:/a:redhat:enterprise_linux:9::realtime",
                "cpe:/a:redhat:enterprise_linux:9::sap",
                "cpe:/a:redhat:enterprise_linux:9::sap_hana",
                "cpe:/o:redhat:enterprise_linux:9::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.24.0-2.el9_5",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:enterprise_linux:9::appstream",
                "cpe:/a:redhat:enterprise_linux:9::nfv",
                "cpe:/a:redhat:enterprise_linux:9::realtime",
                "cpe:/a:redhat:enterprise_linux:9::sap",
                "cpe:/a:redhat:enterprise_linux:9::sap_hana",
                "cpe:/o:redhat:enterprise_linux:9::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.24.0-2.el9_5",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "tuned",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:10"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 10",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:6"
              ],
              "defaultStatus": "unaffected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 6",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7"
              ],
              "defaultStatus": "unaffected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8"
              ],
              "defaultStatus": "unaffected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 8",
              "vendor": "Red Hat"
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "Red Hat would like to thank Matthias Gerstner (SUSE Security Team) for reporting this issue."
            }
          ],
          "datePublic": "2024-11-26T12:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A script injection vulnerability was identified in the Tuned package. The `instance_create()` D-Bus function can be called by locally logged-in users without authentication. This flaw allows a local non-privileged user to execute a D-Bus call with `script_pre` or `script_post` options that permit arbitrary scripts with their absolute paths to be passed. These user or attacker-controlled executable scripts or programs could then be executed by Tuned with root privileges that could allow attackers to local privilege escalation."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Important"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-269",
                  "description": "Improper Privilege Management",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-06-26T00:51:25.852Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHSA-2024:10384",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:10384"
            },
            {
              "name": "RHSA-2025:0879",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0879"
            },
            {
              "name": "RHSA-2025:0880",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0880"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2024-52336"
            },
            {
              "name": "RHBZ#2324540",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2324540"
            },
            {
              "url": "https://github.com/redhat-performance/tuned/releases/tag/v2.24.1"
            },
            {
              "url": "https://security.opensuse.org/2024/11/26/tuned-instance-create.html"
            },
            {
              "url": "https://www.openwall.com/lists/oss-security/2024/11/28/1"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2024-11-08T00:00:00.000Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2024-11-26T12:00:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root",
          "workarounds": [
            {
              "lang": "en",
              "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_redhatCweChain": "CWE-269: Improper Privilege Management"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2024-52336",
        "datePublished": "2024-11-26T15:21:13.518Z",
        "dateReserved": "2024-11-08T13:09:39.004Z",
        "dateUpdated": "2026-06-26T00:51:25.852Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2024-2182 (GCVE-0-2024-2182)

    Vulnerability from nvd – Published: 2024-03-12 16:18 – Updated: 2025-11-08 07:11
    VLAI
    Title
    Ovn: insufficient validation of bfd packets may lead to denial of service
    Summary
    A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-346 - Origin Validation Error
    Assigner
    Impacted products
    Vendor Product Version
    Affected: 20.03.0 , < * (semver)
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:23.06.1-112.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:22.12.1-94.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:22.03.3-71.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:23.03.1-100.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:21.12.0-142.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:23.09.0-136.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:23.06.1-112.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:22.12.1-94.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:22.03.3-71.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:23.03.1-100.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 7     cpe:/o:redhat:enterprise_linux:7::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 8     cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 9     cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Date Public
    2024-03-12 00:00
    Credits
    Red Hat would like to thank Frode Nordahl (Canonical) for reporting this issue.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-2182",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-03-13T14:24:40.610508Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-04-15T15:26:18.815Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-01T19:03:39.232Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "http://www.openwall.com/lists/oss-security/2024/03/12/5"
              },
              {
                "name": "RHSA-2024:1385",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2024:1385"
              },
              {
                "name": "RHSA-2024:1386",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2024:1386"
              },
              {
                "name": "RHSA-2024:1387",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2024:1387"
              },
              {
                "name": "RHSA-2024:1388",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2024:1388"
              },
              {
                "name": "RHSA-2024:1390",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2024:1390"
              },
              {
                "name": "RHSA-2024:1391",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2024:1391"
              },
              {
                "name": "RHSA-2024:1392",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2024:1392"
              },
              {
                "name": "RHSA-2024:1393",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2024:1393"
              },
              {
                "name": "RHSA-2024:1394",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2024:1394"
              },
              {
                "name": "RHSA-2024:4035",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2024:4035"
              },
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2024-2182"
              },
              {
                "name": "RHBZ#2267840",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267840"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APR4GCVCMQD3DQUKXDNGIXCCYGE5V7IT/"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CB4N522FCS4XWAPUKRWZF6QZ657FCIDF/"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XRKXOOOKD56TY3JQVB45N3GCTX3EG4BV/"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://mail.openvswitch.org/pipermail/ovs-announce/2024-March/000346.html"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.openwall.com/lists/oss-security/2024/03/12/5"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://www.github.com/ovn-org/ovn/",
              "defaultStatus": "unaffected",
              "packageName": "ovn",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "affected",
                  "version": "20.03.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.06",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.06.1-112.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.12",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.12.1-94.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.03.3-71.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.03.1-100.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn-2021",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:21.12.0-142.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.09",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.09.0-136.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.06",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.06.1-112.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.12",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.12.1-94.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.03.3-71.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.03.1-100.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn2.11",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn2.12",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn2.13",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn2.11",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn2.12",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn2.13",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn22.06",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn22.09",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn-2021",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn22.06",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn22.09",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "Red Hat would like to thank Frode Nordahl (Canonical) for reporting this issue."
            }
          ],
          "datePublic": "2024-03-12T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Moderate"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-346",
                  "description": "Origin Validation Error",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2025-11-08T07:11:46.026Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHSA-2024:1385",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:1385"
            },
            {
              "name": "RHSA-2024:1386",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:1386"
            },
            {
              "name": "RHSA-2024:1387",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:1387"
            },
            {
              "name": "RHSA-2024:1388",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:1388"
            },
            {
              "name": "RHSA-2024:1390",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:1390"
            },
            {
              "name": "RHSA-2024:1391",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:1391"
            },
            {
              "name": "RHSA-2024:1392",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:1392"
            },
            {
              "name": "RHSA-2024:1393",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:1393"
            },
            {
              "name": "RHSA-2024:1394",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:1394"
            },
            {
              "name": "RHSA-2024:4035",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:4035"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2024-2182"
            },
            {
              "name": "RHBZ#2267840",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267840"
            },
            {
              "url": "https://mail.openvswitch.org/pipermail/ovs-announce/2024-March/000346.html"
            },
            {
              "url": "https://www.openwall.com/lists/oss-security/2024/03/12/5"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2024-03-04T00:00:00.000Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2024-03-12T00:00:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Ovn: insufficient validation of bfd packets may lead to denial of service",
          "x_redhatCweChain": "CWE-346: Origin Validation Error"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2024-2182",
        "datePublished": "2024-03-12T16:18:31.829Z",
        "dateReserved": "2024-03-05T00:40:55.429Z",
        "dateUpdated": "2025-11-08T07:11:46.026Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-5265 (GCVE-0-2026-5265)

    Vulnerability from cvelistv5 – Published: 2026-04-24 12:25 – Updated: 2026-06-17 22:00
    VLAI
    Title
    Ovn: ovn: heap over-read in icmp error response generation
    Summary
    When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header's self-declared total length (ip_tot_len for IPv4, ip6_plen for IPv6) without validating it against the actual packet buffer size. A VM can send a short packet with an inflated IP length field that triggers an ICMP error (e.g., by hitting a reject ACL), causing ovn-controller to read heap memory beyond the valid packet data and include it in the ICMP response sent back to the VM.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-130 - Improper Handling of Length Parameter Inconsistency
    Assigner
    Impacted products
    Vendor Product Version
    Red Hat Fast Datapath for Red Hat Enterprise Linux 10 Unaffected: 0:25.03.2-100.el10fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 10 Unaffected: 0:25.09.2-103.el10fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:21.12.0-145.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:23.06.4-30.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:23.06.4-30.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:23.09.6-16.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:24.03.7-82.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:25.03.2-100.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:25.09.2-103.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 7     cpe:/o:redhat:enterprise_linux:7::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 8     cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 9     cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Date Public
    2026-04-06 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2026-04-24T13:37:06.533Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "http://www.openwall.com/lists/oss-security/2026/04/20/2"
              },
              {
                "url": "http://www.openwall.com/lists/oss-security/2026/04/20/4"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-5265",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-24T18:19:52.126823Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-24T18:21:26.388Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:10::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn25.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 10",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:25.03.2-100.el10fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:10::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn25.09",
              "product": "Fast Datapath for Red Hat Enterprise Linux 10",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:25.09.2-103.el10fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn-2021",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:21.12.0-145.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.06",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.06.4-30.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.06",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.06.4-30.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.09",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.09.6-16.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn24.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:24.03.7-82.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn25.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:25.03.2-100.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn25.09",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:25.09.2-103.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn2.11",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn2.12",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn2.13",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn2.11",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn2.12",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn2.13",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.03",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.06",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.09",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.12",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.03",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn-2021",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.03",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.06",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.09",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.12",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.03",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn24.09",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            }
          ],
          "datePublic": "2026-04-06T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header\u0027s self-declared total length (ip_tot_len for IPv4, ip6_plen for IPv6) without validating it against the actual packet buffer size. A VM can send a short packet with an inflated IP length field that triggers an ICMP error (e.g., by hitting a reject ACL), causing ovn-controller to read heap memory beyond the valid packet data and include it in the ICMP response sent back to the VM."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Moderate"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-130",
                  "description": "Improper Handling of Length Parameter Inconsistency",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-06-17T22:00:07.950Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHSA-2026:11694",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11694"
            },
            {
              "name": "RHSA-2026:11695",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11695"
            },
            {
              "name": "RHSA-2026:11696",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11696"
            },
            {
              "name": "RHSA-2026:11698",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11698"
            },
            {
              "name": "RHSA-2026:11700",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11700"
            },
            {
              "name": "RHSA-2026:11701",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11701"
            },
            {
              "name": "RHSA-2026:11702",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11702"
            },
            {
              "name": "RHSA-2026:22110",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:22110"
            },
            {
              "name": "RHSA-2026:22111",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:22111"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2026-5265"
            },
            {
              "name": "RHBZ#2453458",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453458"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-03-24T00:00:00.000Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2026-04-06T00:00:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Ovn: ovn: heap over-read in icmp error response generation",
          "workarounds": [
            {
              "lang": "en",
              "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_redhatCweChain": "CWE-130: Improper Handling of Length Parameter Inconsistency"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2026-5265",
        "datePublished": "2026-04-24T12:25:06.808Z",
        "dateReserved": "2026-03-31T17:33:09.225Z",
        "dateUpdated": "2026-06-17T22:00:07.950Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-5367 (GCVE-0-2026-5367)

    Vulnerability from cvelistv5 – Published: 2026-04-24 12:25 – Updated: 2026-06-30 12:10
    VLAI
    Title
    Ovn: ovn: information disclosure via crafted dhcpv6 packets
    Summary
    A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could cause the ovn-controller to read beyond the bounds of a packet. This out-of-bounds read can lead to the disclosure of sensitive information stored in heap memory, which is then returned to the attacker's virtual machine port.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-130 - Improper Handling of Length Parameter Inconsistency
    Assigner
    Impacted products
    Vendor Product Version
    Red Hat Fast Datapath for Red Hat Enterprise Linux 10 Unaffected: 0:25.03.2-100.el10fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 10 Unaffected: 0:25.09.2-103.el10fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:21.12.0-145.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:23.06.4-30.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:23.06.4-30.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:23.09.6-16.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:24.03.7-82.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:25.03.2-100.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:25.09.2-103.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 8     cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 9     cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 10     cpe:/o:redhat:enterprise_linux:10::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Date Public
    2026-04-13 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2026-04-24T13:37:14.640Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "http://www.openwall.com/lists/oss-security/2026/04/20/3"
              },
              {
                "url": "http://www.openwall.com/lists/oss-security/2026/04/20/5"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-5367",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-24T16:58:51.939172Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-24T18:17:08.701Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10::fastdatapath"
                ],
                "defaultStatus": "affected",
                "product": "Fast Datapath for Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
                ],
                "defaultStatus": "affected",
                "product": "Fast Datapath for Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
                ],
                "defaultStatus": "affected",
                "product": "Fast Datapath for Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
                ],
                "defaultStatus": "affected",
                "product": "Fast Datapath for RHEL 8",
                "vendor": "Red Hat"
              },
              {
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
                ],
                "defaultStatus": "affected",
                "product": "Fast Datapath for RHEL 9",
                "vendor": "Red Hat"
              },
              {
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-13T00:00:00.000Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could cause the ovn-controller to read beyond the bounds of a packet. This out-of-bounds read can lead to the disclosure of sensitive information stored in heap memory, which is then returned to the attacker\u0027s virtual machine port."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 8.6,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "NONE",
                  "privilegesRequired": "NONE",
                  "scope": "CHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-130",
                    "description": "Improper Handling of Length Parameter Inconsistency",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-06-30T12:10:32.848Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-5367"
              },
              {
                "name": "RHBZ#2455863",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455863"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5367.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22110"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22111"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:11694"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:11695"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:11696"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:11698"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:11700"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:11701"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:11702"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:22110: Fast Datapath for Red Hat Enterprise Linux 10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22111: Fast Datapath for Red Hat Enterprise Linux 10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:11694: Fast Datapath for Red Hat Enterprise Linux 8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:11695: Fast Datapath for Red Hat Enterprise Linux 8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:11696: Fast Datapath for Red Hat Enterprise Linux 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:11698: Fast Datapath for Red Hat Enterprise Linux 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:11700: Fast Datapath for Red Hat Enterprise Linux 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:11701: Fast Datapath for Red Hat Enterprise Linux 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:11702: Fast Datapath for Red Hat Enterprise Linux 9"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-04-07T08:10:53.507Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-13T00:00:00.000Z",
                "value": "Made public."
              }
            ],
            "title": "ovn: OVN: Information disclosure via crafted DHCPv6 packets",
            "workarounds": [
              {
                "lang": "en",
                "value": "The only potential mitigation is to disable the DHCPv6 feature for\nworkloads attached to OVN logical ports, e.g.:\n\novn-nbctl clear logical_switch_port \u003cworkload-port\u003e dhcpv6_options.\n\nWe do not recommend mitigating the vulnerability this way because it\nwill also disable legitimate DHCPv6 traffic originating from\nworkloads connected to logical switch ports."
              }
            ],
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:10::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn25.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 10",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:25.03.2-100.el10fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:10::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn25.09",
              "product": "Fast Datapath for Red Hat Enterprise Linux 10",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:25.09.2-103.el10fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn-2021",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:21.12.0-145.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.06",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.06.4-30.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.06",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.06.4-30.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.09",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.09.6-16.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn24.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:24.03.7-82.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn25.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:25.03.2-100.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn25.09",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:25.09.2-103.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn2.11",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn2.12",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn2.13",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.03",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn-2021",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.03",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn22.06",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn22.09",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn22.12",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn23.03",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.06",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn23.09",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn24.03",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn24.09",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn25.03",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            }
          ],
          "datePublic": "2026-04-13T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could cause the ovn-controller to read beyond the bounds of a packet. This out-of-bounds read can lead to the disclosure of sensitive information stored in heap memory, which is then returned to the attacker\u0027s virtual machine port."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Important"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 8.6,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-130",
                  "description": "Improper Handling of Length Parameter Inconsistency",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-06-01T02:48:19.206Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHSA-2026:11694",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11694"
            },
            {
              "name": "RHSA-2026:11695",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11695"
            },
            {
              "name": "RHSA-2026:11696",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11696"
            },
            {
              "name": "RHSA-2026:11698",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11698"
            },
            {
              "name": "RHSA-2026:11700",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11700"
            },
            {
              "name": "RHSA-2026:11701",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11701"
            },
            {
              "name": "RHSA-2026:11702",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:11702"
            },
            {
              "name": "RHSA-2026:22110",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:22110"
            },
            {
              "name": "RHSA-2026:22111",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:22111"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2026-5367"
            },
            {
              "name": "RHBZ#2455863",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455863"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-04-07T08:10:53.507Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2026-04-13T00:00:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Ovn: ovn: information disclosure via crafted dhcpv6 packets",
          "workarounds": [
            {
              "lang": "en",
              "value": "The only potential mitigation is to disable the DHCPv6 feature for\nworkloads attached to OVN logical ports, e.g.:\n\novn-nbctl clear logical_switch_port \u003cworkload-port\u003e dhcpv6_options.\n\nWe do not recommend mitigating the vulnerability this way because it\nwill also disable legitimate DHCPv6 traffic originating from\nworkloads connected to logical switch ports."
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_redhatCweChain": "CWE-130: Improper Handling of Length Parameter Inconsistency"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2026-5367",
        "datePublished": "2026-04-24T12:25:05.024Z",
        "dateReserved": "2026-04-01T18:39:05.229Z",
        "dateUpdated": "2026-06-30T12:10:32.848Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2025-0650 (GCVE-0-2025-0650)

    Vulnerability from cvelistv5 – Published: 2025-01-23 16:34 – Updated: 2025-11-20 07:25
    VLAI
    Title
    Ovn: egress acls may be bypassed via specially crafted udp packet
    Summary
    A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-284 - Improper Access Control
    Assigner
    References
    URL Tags
    https://access.redhat.com/errata/RHSA-2025:1083 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1084 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1085 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1086 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1087 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1088 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1089 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1090 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1091 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1092 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1093 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1094 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1095 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1096 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:1097 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/security/cve/CVE-2025-0650 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2339537 issue-trackingx_refsource_REDHAT
    https://www.openwall.com/lists/oss-security/2025/…
    http://www.openwall.com/lists/oss-security/2025/0…
    Impacted products
    Vendor Product Version
    Unaffected: 22.03.8 (semver)
    Unaffected: 24.03.5 (semver)
    Unaffected: 24.09.2 (semver)
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:22.03.7-11.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:22.06.0-273.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:22.09.2-86.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:22.12.1-107.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:23.03.3-22.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:23.06.4-26.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:22.03.7-11.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:22.06.0-273.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:22.09.2-86.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:22.12.1-107.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:23.03.3-22.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:23.06.4-26.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:23.09.6-12.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:24.03.4-53.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:24.09.1-66.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Date Public
    2024-01-21 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2025-01-23T18:03:31.666Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "http://www.openwall.com/lists/oss-security/2025/01/22/11"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-0650",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-01-23T17:00:24.397376Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-02-12T20:41:29.401Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://github.com/ovn-org/ovn",
              "defaultStatus": "unknown",
              "packageName": "ovn",
              "versions": [
                {
                  "status": "unaffected",
                  "version": "22.03.8",
                  "versionType": "semver"
                },
                {
                  "status": "unaffected",
                  "version": "24.03.5",
                  "versionType": "semver"
                },
                {
                  "status": "unaffected",
                  "version": "24.09.2",
                  "versionType": "semver"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.03.7-11.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.06",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.06.0-273.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.09",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.09.2-86.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.12",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.12.1-107.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.03.3-22.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.06",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.06.4-26.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.03.7-11.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.06",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.06.0-273.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.09",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.09.2-86.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.12",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.12.1-107.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.03.3-22.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.06",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.06.4-26.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.09",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.09.6-12.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn24.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:24.03.4-53.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn24.09",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:24.09.1-66.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn22.06",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn22.09",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn22.12",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn23.03",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.06",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn23.09",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn24.03",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "ovn24.09",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            }
          ],
          "datePublic": "2024-01-21T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Important"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-284",
                  "description": "Improper Access Control",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2025-11-20T07:25:53.629Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHSA-2025:1083",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1083"
            },
            {
              "name": "RHSA-2025:1084",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1084"
            },
            {
              "name": "RHSA-2025:1085",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1085"
            },
            {
              "name": "RHSA-2025:1086",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1086"
            },
            {
              "name": "RHSA-2025:1087",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1087"
            },
            {
              "name": "RHSA-2025:1088",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1088"
            },
            {
              "name": "RHSA-2025:1089",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1089"
            },
            {
              "name": "RHSA-2025:1090",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1090"
            },
            {
              "name": "RHSA-2025:1091",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1091"
            },
            {
              "name": "RHSA-2025:1092",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1092"
            },
            {
              "name": "RHSA-2025:1093",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1093"
            },
            {
              "name": "RHSA-2025:1094",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1094"
            },
            {
              "name": "RHSA-2025:1095",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1095"
            },
            {
              "name": "RHSA-2025:1096",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1096"
            },
            {
              "name": "RHSA-2025:1097",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1097"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2025-0650"
            },
            {
              "name": "RHBZ#2339537",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2339537"
            },
            {
              "url": "https://www.openwall.com/lists/oss-security/2025/01/22/5"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2025-01-22T15:45:40.119Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2024-01-21T00:00:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Ovn: egress acls may be bypassed via specially crafted udp packet",
          "workarounds": [
            {
              "lang": "en",
              "value": "Red Hat Product Security has not identified any mitigations at this time. We recommend updating to a known patched version of OVN."
            }
          ],
          "x_redhatCweChain": "CWE-284: Improper Access Control"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2025-0650",
        "datePublished": "2025-01-23T16:34:31.390Z",
        "dateReserved": "2025-01-22T15:37:30.389Z",
        "dateUpdated": "2025-11-20T07:25:53.629Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2024-11614 (GCVE-0-2024-11614)

    Vulnerability from cvelistv5 – Published: 2024-12-18 08:30 – Updated: 2025-11-20 00:59
    VLAI
    Title
    Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library
    Summary
    An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash the hypervisor's vSwitch by forging Virtio descriptors to cause out-of-bounds reads. This flaw allows an attacker with a malicious VM using a virtio driver to cause the vhost-user side to crash by sending a packet with a Tx checksum offload request and an invalid csum_start offset.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    URL Tags
    https://access.redhat.com/errata/RHSA-2025:0208 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:0209 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:0210 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:0211 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:0220 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:0221 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:0222 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:3963 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:3964 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:3965 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2025:3970 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/security/cve/CVE-2024-11614 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2327955 issue-trackingx_refsource_REDHAT
    http://www.openwall.com/lists/oss-security/2024/12/17/3
    Impacted products
    Vendor Product Version
    Affected: 21.05 , < 21.11-4 (semver)
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:3.1.0-159.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:3.1.0-149.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:3.3.0-92.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:3.4.0-48.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8 Unaffected: 0:23.11-2.el8_10 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:8::appstream
        cpe:/a:redhat:enterprise_linux:8::crb
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Unaffected: 0:21.11-3.el8_6 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:8.6::appstream
        cpe:/a:redhat:rhel_tus:8.6::appstream
        cpe:/a:redhat:rhel_aus:8.6::appstream
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service Unaffected: 0:21.11-3.el8_6 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:8.6::appstream
        cpe:/a:redhat:rhel_tus:8.6::appstream
        cpe:/a:redhat:rhel_aus:8.6::appstream
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions Unaffected: 0:21.11-3.el8_6 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:8.6::appstream
        cpe:/a:redhat:rhel_tus:8.6::appstream
        cpe:/a:redhat:rhel_aus:8.6::appstream
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support Unaffected: 0:21.11-4.el8_8 , < * (rpm)
        cpe:/a:redhat:rhel_eus:8.8::appstream
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 2:23.11-2.el9_5 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9::appstream
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Unaffected: 2:21.11-3.el9_0 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.0::appstream
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support Unaffected: 2:22.11-4.el9_2 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.2::appstream
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support Unaffected: 2:23.11-2.el9_4 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.4::appstream
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 7     cpe:/o:redhat:enterprise_linux:7::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 8     cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 9     cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Date Public
    2024-12-17 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-12-18T09:03:01.520Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "http://www.openwall.com/lists/oss-security/2024/12/17/3"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-11614",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-12-18T14:47:13.057559Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-12-18T14:48:14.956Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://git.dpdk.org/dpdk-stable/",
              "defaultStatus": "unaffected",
              "packageName": "dpdk",
              "versions": [
                {
                  "lessThan": "21.11-4",
                  "status": "affected",
                  "version": "21.05",
                  "versionType": "semver"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "openvswitch3.1",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:3.1.0-159.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "openvswitch3.1",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:3.1.0-149.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "openvswitch3.3",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:3.3.0-92.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "openvswitch3.4",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:3.4.0-48.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:enterprise_linux:8::appstream",
                "cpe:/a:redhat:enterprise_linux:8::crb"
              ],
              "defaultStatus": "affected",
              "packageName": "dpdk",
              "product": "Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.11-2.el8_10",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_e4s:8.6::appstream",
                "cpe:/a:redhat:rhel_tus:8.6::appstream",
                "cpe:/a:redhat:rhel_aus:8.6::appstream"
              ],
              "defaultStatus": "affected",
              "packageName": "dpdk",
              "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:21.11-3.el8_6",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_e4s:8.6::appstream",
                "cpe:/a:redhat:rhel_tus:8.6::appstream",
                "cpe:/a:redhat:rhel_aus:8.6::appstream"
              ],
              "defaultStatus": "affected",
              "packageName": "dpdk",
              "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:21.11-3.el8_6",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_e4s:8.6::appstream",
                "cpe:/a:redhat:rhel_tus:8.6::appstream",
                "cpe:/a:redhat:rhel_aus:8.6::appstream"
              ],
              "defaultStatus": "affected",
              "packageName": "dpdk",
              "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:21.11-3.el8_6",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_eus:8.8::appstream"
              ],
              "defaultStatus": "affected",
              "packageName": "dpdk",
              "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:21.11-4.el8_8",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:enterprise_linux:9::appstream"
              ],
              "defaultStatus": "affected",
              "packageName": "dpdk",
              "product": "Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "2:23.11-2.el9_5",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_e4s:9.0::appstream"
              ],
              "defaultStatus": "affected",
              "packageName": "dpdk",
              "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "2:21.11-3.el9_0",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_eus:9.2::appstream"
              ],
              "defaultStatus": "affected",
              "packageName": "dpdk",
              "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "2:22.11-4.el9_2",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_eus:9.4::appstream"
              ],
              "defaultStatus": "affected",
              "packageName": "dpdk",
              "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "2:23.11-2.el9_4",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "dpdk",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch2.10",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch2.11",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch2.12",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch2.11",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch2.12",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch2.13",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch2.15",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch2.16",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch2.17",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch2.17",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch3.0",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch3.2",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch2.17",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch3.0",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch3.1",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:openshift:4"
              ],
              "defaultStatus": "unaffected",
              "packageName": "openvswitch3.3",
              "product": "Red Hat OpenShift Container Platform 4",
              "vendor": "Red Hat"
            }
          ],
          "datePublic": "2024-12-17T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "An out-of-bounds read vulnerability was found in DPDK\u0027s Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash the hypervisor\u0027s vSwitch by forging Virtio descriptors to cause out-of-bounds reads. This flaw allows an attacker with a malicious VM using a virtio driver to cause the vhost-user side to crash by sending a packet with a Tx checksum offload request and an invalid csum_start offset."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Important"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_0": {
                "attackComplexity": "LOW",
                "attackVector": "ADJACENT_NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.4,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
                "version": "3.0"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-125",
                  "description": "Out-of-bounds Read",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2025-11-20T00:59:36.216Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHSA-2025:0208",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0208"
            },
            {
              "name": "RHSA-2025:0209",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0209"
            },
            {
              "name": "RHSA-2025:0210",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0210"
            },
            {
              "name": "RHSA-2025:0211",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0211"
            },
            {
              "name": "RHSA-2025:0220",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0220"
            },
            {
              "name": "RHSA-2025:0221",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0221"
            },
            {
              "name": "RHSA-2025:0222",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0222"
            },
            {
              "name": "RHSA-2025:3963",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:3963"
            },
            {
              "name": "RHSA-2025:3964",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:3964"
            },
            {
              "name": "RHSA-2025:3965",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:3965"
            },
            {
              "name": "RHSA-2025:3970",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:3970"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2024-11614"
            },
            {
              "name": "RHBZ#2327955",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2327955"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2024-11-22T00:00:00.000Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2024-12-17T00:00:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library",
          "x_redhatCweChain": "CWE-125: Out-of-bounds Read"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2024-11614",
        "datePublished": "2024-12-18T08:30:49.729Z",
        "dateReserved": "2024-11-22T04:21:45.124Z",
        "dateUpdated": "2025-11-20T00:59:36.216Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2024-52337 (GCVE-0-2024-52337)

    Vulnerability from cvelistv5 – Published: 2024-11-26 15:21 – Updated: 2026-06-26 01:03
    VLAI
    Title
    Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method
    Summary
    A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick the administrator. The quotes '' are usually used in TuneD logs citing raw user input, so there will always be the ' character ending the spoofed input, and the administrator can easily overlook this. This logged string is later used in logging and in the output of utilities, for example, `tuned-adm get_instances` or other third-party programs that use Tuned's D-Bus interface for such operations.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-20 - Improper Input Validation
    Assigner
    Impacted products
    Vendor Product Version
    Affected: 2.23.0 , < 2.24.1 (semver)
    Red Hat Fast Datapath for Red Hat Enterprise Linux 7 Unaffected: 0:2.11.0-5.el7fdp.2 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:7::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:2.24.0-2.1.20240819gitc082797f.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:2.24.0-2.1.20240819gitc082797f.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support Unaffected: 0:2.11.0-13.el7_9 , < * (rpm)
        cpe:/a:redhat:rhel_extras_rt_els:7
        cpe:/a:redhat:rhel_extras_sap_els:7
        cpe:/a:redhat:rhel_extras_sap_hana_els:7
        cpe:/o:redhat:rhel_els:7
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8 Unaffected: 0:2.22.1-5.el8_10 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:8::appstream
        cpe:/a:redhat:enterprise_linux:8::nfv
        cpe:/a:redhat:enterprise_linux:8::realtime
        cpe:/a:redhat:enterprise_linux:8::sap
        cpe:/a:redhat:enterprise_linux:8::sap_hana
        cpe:/o:redhat:enterprise_linux:8::baseos
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Unaffected: 0:2.20.0-1.el8_4.2 , < * (rpm)
        cpe:/a:redhat:rhel_aus:8.4::appstream
        cpe:/a:redhat:rhel_e4s:8.4::appstream
        cpe:/a:redhat:rhel_e4s:8.4::sap
        cpe:/a:redhat:rhel_e4s:8.4::sap_hana
        cpe:/a:redhat:rhel_tus:8.4::appstream
        cpe:/a:redhat:rhel_tus:8.4::nfv
        cpe:/a:redhat:rhel_tus:8.4::realtime
        cpe:/o:redhat:rhel_aus:8.4::baseos
        cpe:/o:redhat:rhel_e4s:8.4::baseos
        cpe:/o:redhat:rhel_tus:8.4::baseos
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8.4 Telecommunications Update Service Unaffected: 0:2.20.0-1.el8_4.2 , < * (rpm)
        cpe:/a:redhat:rhel_aus:8.4::appstream
        cpe:/a:redhat:rhel_e4s:8.4::appstream
        cpe:/a:redhat:rhel_e4s:8.4::sap
        cpe:/a:redhat:rhel_e4s:8.4::sap_hana
        cpe:/a:redhat:rhel_tus:8.4::appstream
        cpe:/a:redhat:rhel_tus:8.4::nfv
        cpe:/a:redhat:rhel_tus:8.4::realtime
        cpe:/o:redhat:rhel_aus:8.4::baseos
        cpe:/o:redhat:rhel_e4s:8.4::baseos
        cpe:/o:redhat:rhel_tus:8.4::baseos
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions Unaffected: 0:2.20.0-1.el8_4.2 , < * (rpm)
        cpe:/a:redhat:rhel_aus:8.4::appstream
        cpe:/a:redhat:rhel_e4s:8.4::appstream
        cpe:/a:redhat:rhel_e4s:8.4::sap
        cpe:/a:redhat:rhel_e4s:8.4::sap_hana
        cpe:/a:redhat:rhel_tus:8.4::appstream
        cpe:/a:redhat:rhel_tus:8.4::nfv
        cpe:/a:redhat:rhel_tus:8.4::realtime
        cpe:/o:redhat:rhel_aus:8.4::baseos
        cpe:/o:redhat:rhel_e4s:8.4::baseos
        cpe:/o:redhat:rhel_tus:8.4::baseos
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Unaffected: 0:2.20.0-1.el8_6.2 , < * (rpm)
        cpe:/a:redhat:rhel_aus:8.6::appstream
        cpe:/a:redhat:rhel_e4s:8.6::appstream
        cpe:/a:redhat:rhel_e4s:8.6::nfv
        cpe:/a:redhat:rhel_e4s:8.6::sap
        cpe:/a:redhat:rhel_e4s:8.6::sap_hana
        cpe:/a:redhat:rhel_tus:8.6::appstream
        cpe:/a:redhat:rhel_tus:8.6::nfv
        cpe:/a:redhat:rhel_tus:8.6::realtime
        cpe:/o:redhat:rhel_aus:8.6::baseos
        cpe:/o:redhat:rhel_e4s:8.6::baseos
        cpe:/o:redhat:rhel_tus:8.6::baseos
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service Unaffected: 0:2.20.0-1.el8_6.2 , < * (rpm)
        cpe:/a:redhat:rhel_aus:8.6::appstream
        cpe:/a:redhat:rhel_e4s:8.6::appstream
        cpe:/a:redhat:rhel_e4s:8.6::nfv
        cpe:/a:redhat:rhel_e4s:8.6::sap
        cpe:/a:redhat:rhel_e4s:8.6::sap_hana
        cpe:/a:redhat:rhel_tus:8.6::appstream
        cpe:/a:redhat:rhel_tus:8.6::nfv
        cpe:/a:redhat:rhel_tus:8.6::realtime
        cpe:/o:redhat:rhel_aus:8.6::baseos
        cpe:/o:redhat:rhel_e4s:8.6::baseos
        cpe:/o:redhat:rhel_tus:8.6::baseos
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions Unaffected: 0:2.20.0-1.el8_6.2 , < * (rpm)
        cpe:/a:redhat:rhel_aus:8.6::appstream
        cpe:/a:redhat:rhel_e4s:8.6::appstream
        cpe:/a:redhat:rhel_e4s:8.6::nfv
        cpe:/a:redhat:rhel_e4s:8.6::sap
        cpe:/a:redhat:rhel_e4s:8.6::sap_hana
        cpe:/a:redhat:rhel_tus:8.6::appstream
        cpe:/a:redhat:rhel_tus:8.6::nfv
        cpe:/a:redhat:rhel_tus:8.6::realtime
        cpe:/o:redhat:rhel_aus:8.6::baseos
        cpe:/o:redhat:rhel_e4s:8.6::baseos
        cpe:/o:redhat:rhel_tus:8.6::baseos
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support Unaffected: 0:2.20.0-2.el8_8.1 , < * (rpm)
        cpe:/a:redhat:rhel_eus:8.8::appstream
        cpe:/a:redhat:rhel_eus:8.8::nfv
        cpe:/a:redhat:rhel_eus:8.8::realtime
        cpe:/a:redhat:rhel_eus:8.8::sap
        cpe:/a:redhat:rhel_eus:8.8::sap_hana
        cpe:/o:redhat:rhel_eus:8.8::baseos
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 0:2.24.0-2.el9_5 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9::appstream
        cpe:/a:redhat:enterprise_linux:9::nfv
        cpe:/a:redhat:enterprise_linux:9::realtime
        cpe:/a:redhat:enterprise_linux:9::sap
        cpe:/a:redhat:enterprise_linux:9::sap_hana
        cpe:/o:redhat:enterprise_linux:9::baseos
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support Unaffected: 0:2.20.0-3.el9_2 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.2::appstream
        cpe:/a:redhat:rhel_eus:9.2::nfv
        cpe:/a:redhat:rhel_eus:9.2::realtime
        cpe:/a:redhat:rhel_eus:9.2::sap
        cpe:/a:redhat:rhel_eus:9.2::sap_hana
        cpe:/o:redhat:rhel_eus:9.2::baseos
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support Unaffected: 0:2.22.1-3.el9_4 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.4::appstream
        cpe:/a:redhat:rhel_eus:9.4::nfv
        cpe:/a:redhat:rhel_eus:9.4::realtime
        cpe:/a:redhat:rhel_eus:9.4::sap
        cpe:/a:redhat:rhel_eus:9.4::sap_hana
        cpe:/o:redhat:rhel_eus:9.4::baseos
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10     cpe:/o:redhat:enterprise_linux:10
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 6     cpe:/o:redhat:enterprise_linux:6
    Create a notification for this product.
    Date Public
    2024-11-26 12:00
    Credits
    Red Hat would like to thank Matthias Gerstner (SUSE Security Team) for reporting this issue.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-52337",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-11-26T15:57:55.472014Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-11-26T15:58:21.678Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "providerMetadata": {
              "dateUpdated": "2024-11-29T04:33:54.110Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "https://www.openwall.com/lists/oss-security/2024/11/28/2"
              },
              {
                "url": "https://security.opensuse.org/2024/11/26/tuned-instance-create.html"
              }
            ],
            "title": "CVE Program Container",
            "x_generator": {
              "engine": "ADPogram 0.0.1"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://github.com/redhat-performance/tuned",
              "defaultStatus": "unaffected",
              "packageName": "tuned",
              "versions": [
                {
                  "lessThan": "2.24.1",
                  "status": "affected",
                  "version": "2.23.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Fast Datapath for Red Hat Enterprise Linux 7",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.11.0-5.el7fdp.2",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.24.0-2.1.20240819gitc082797f.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.24.0-2.1.20240819gitc082797f.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_extras_rt_els:7",
                "cpe:/a:redhat:rhel_extras_sap_els:7",
                "cpe:/a:redhat:rhel_extras_sap_hana_els:7",
                "cpe:/o:redhat:rhel_els:7"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.11.0-13.el7_9",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_extras_rt_els:7",
                "cpe:/a:redhat:rhel_extras_sap_els:7",
                "cpe:/a:redhat:rhel_extras_sap_hana_els:7",
                "cpe:/o:redhat:rhel_els:7"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.11.0-13.el7_9",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:enterprise_linux:8::appstream",
                "cpe:/a:redhat:enterprise_linux:8::nfv",
                "cpe:/a:redhat:enterprise_linux:8::realtime",
                "cpe:/a:redhat:enterprise_linux:8::sap",
                "cpe:/a:redhat:enterprise_linux:8::sap_hana",
                "cpe:/o:redhat:enterprise_linux:8::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.22.1-5.el8_10",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:enterprise_linux:8::appstream",
                "cpe:/a:redhat:enterprise_linux:8::nfv",
                "cpe:/a:redhat:enterprise_linux:8::realtime",
                "cpe:/a:redhat:enterprise_linux:8::sap",
                "cpe:/a:redhat:enterprise_linux:8::sap_hana",
                "cpe:/o:redhat:enterprise_linux:8::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.22.1-5.el8_10",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_aus:8.4::appstream",
                "cpe:/a:redhat:rhel_e4s:8.4::appstream",
                "cpe:/a:redhat:rhel_e4s:8.4::sap",
                "cpe:/a:redhat:rhel_e4s:8.4::sap_hana",
                "cpe:/a:redhat:rhel_tus:8.4::appstream",
                "cpe:/a:redhat:rhel_tus:8.4::nfv",
                "cpe:/a:redhat:rhel_tus:8.4::realtime",
                "cpe:/o:redhat:rhel_aus:8.4::baseos",
                "cpe:/o:redhat:rhel_e4s:8.4::baseos",
                "cpe:/o:redhat:rhel_tus:8.4::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.20.0-1.el8_4.2",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_aus:8.4::appstream",
                "cpe:/a:redhat:rhel_e4s:8.4::appstream",
                "cpe:/a:redhat:rhel_e4s:8.4::sap",
                "cpe:/a:redhat:rhel_e4s:8.4::sap_hana",
                "cpe:/a:redhat:rhel_tus:8.4::appstream",
                "cpe:/a:redhat:rhel_tus:8.4::nfv",
                "cpe:/a:redhat:rhel_tus:8.4::realtime",
                "cpe:/o:redhat:rhel_aus:8.4::baseos",
                "cpe:/o:redhat:rhel_e4s:8.4::baseos",
                "cpe:/o:redhat:rhel_tus:8.4::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.20.0-1.el8_4.2",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_aus:8.4::appstream",
                "cpe:/a:redhat:rhel_e4s:8.4::appstream",
                "cpe:/a:redhat:rhel_e4s:8.4::sap",
                "cpe:/a:redhat:rhel_e4s:8.4::sap_hana",
                "cpe:/a:redhat:rhel_tus:8.4::appstream",
                "cpe:/a:redhat:rhel_tus:8.4::nfv",
                "cpe:/a:redhat:rhel_tus:8.4::realtime",
                "cpe:/o:redhat:rhel_aus:8.4::baseos",
                "cpe:/o:redhat:rhel_e4s:8.4::baseos",
                "cpe:/o:redhat:rhel_tus:8.4::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.20.0-1.el8_4.2",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_aus:8.6::appstream",
                "cpe:/a:redhat:rhel_e4s:8.6::appstream",
                "cpe:/a:redhat:rhel_e4s:8.6::nfv",
                "cpe:/a:redhat:rhel_e4s:8.6::sap",
                "cpe:/a:redhat:rhel_e4s:8.6::sap_hana",
                "cpe:/a:redhat:rhel_tus:8.6::appstream",
                "cpe:/a:redhat:rhel_tus:8.6::nfv",
                "cpe:/a:redhat:rhel_tus:8.6::realtime",
                "cpe:/o:redhat:rhel_aus:8.6::baseos",
                "cpe:/o:redhat:rhel_e4s:8.6::baseos",
                "cpe:/o:redhat:rhel_tus:8.6::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.20.0-1.el8_6.2",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_aus:8.6::appstream",
                "cpe:/a:redhat:rhel_e4s:8.6::appstream",
                "cpe:/a:redhat:rhel_e4s:8.6::nfv",
                "cpe:/a:redhat:rhel_e4s:8.6::sap",
                "cpe:/a:redhat:rhel_e4s:8.6::sap_hana",
                "cpe:/a:redhat:rhel_tus:8.6::appstream",
                "cpe:/a:redhat:rhel_tus:8.6::nfv",
                "cpe:/a:redhat:rhel_tus:8.6::realtime",
                "cpe:/o:redhat:rhel_aus:8.6::baseos",
                "cpe:/o:redhat:rhel_e4s:8.6::baseos",
                "cpe:/o:redhat:rhel_tus:8.6::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.20.0-1.el8_6.2",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_aus:8.6::appstream",
                "cpe:/a:redhat:rhel_e4s:8.6::appstream",
                "cpe:/a:redhat:rhel_e4s:8.6::nfv",
                "cpe:/a:redhat:rhel_e4s:8.6::sap",
                "cpe:/a:redhat:rhel_e4s:8.6::sap_hana",
                "cpe:/a:redhat:rhel_tus:8.6::appstream",
                "cpe:/a:redhat:rhel_tus:8.6::nfv",
                "cpe:/a:redhat:rhel_tus:8.6::realtime",
                "cpe:/o:redhat:rhel_aus:8.6::baseos",
                "cpe:/o:redhat:rhel_e4s:8.6::baseos",
                "cpe:/o:redhat:rhel_tus:8.6::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.20.0-1.el8_6.2",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_eus:8.8::appstream",
                "cpe:/a:redhat:rhel_eus:8.8::nfv",
                "cpe:/a:redhat:rhel_eus:8.8::realtime",
                "cpe:/a:redhat:rhel_eus:8.8::sap",
                "cpe:/a:redhat:rhel_eus:8.8::sap_hana",
                "cpe:/o:redhat:rhel_eus:8.8::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.20.0-2.el8_8.1",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:enterprise_linux:9::appstream",
                "cpe:/a:redhat:enterprise_linux:9::nfv",
                "cpe:/a:redhat:enterprise_linux:9::realtime",
                "cpe:/a:redhat:enterprise_linux:9::sap",
                "cpe:/a:redhat:enterprise_linux:9::sap_hana",
                "cpe:/o:redhat:enterprise_linux:9::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.24.0-2.el9_5",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:enterprise_linux:9::appstream",
                "cpe:/a:redhat:enterprise_linux:9::nfv",
                "cpe:/a:redhat:enterprise_linux:9::realtime",
                "cpe:/a:redhat:enterprise_linux:9::sap",
                "cpe:/a:redhat:enterprise_linux:9::sap_hana",
                "cpe:/o:redhat:enterprise_linux:9::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.24.0-2.el9_5",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_eus:9.2::appstream",
                "cpe:/a:redhat:rhel_eus:9.2::nfv",
                "cpe:/a:redhat:rhel_eus:9.2::realtime",
                "cpe:/a:redhat:rhel_eus:9.2::sap",
                "cpe:/a:redhat:rhel_eus:9.2::sap_hana",
                "cpe:/o:redhat:rhel_eus:9.2::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.20.0-3.el9_2",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:rhel_eus:9.4::appstream",
                "cpe:/a:redhat:rhel_eus:9.4::nfv",
                "cpe:/a:redhat:rhel_eus:9.4::realtime",
                "cpe:/a:redhat:rhel_eus:9.4::sap",
                "cpe:/a:redhat:rhel_eus:9.4::sap_hana",
                "cpe:/o:redhat:rhel_eus:9.4::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.22.1-3.el9_4",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:10"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 10",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:6"
              ],
              "defaultStatus": "unknown",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 6",
              "vendor": "Red Hat"
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "Red Hat would like to thank Matthias Gerstner (SUSE Security Team) for reporting this issue."
            }
          ],
          "datePublic": "2024-11-26T12:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the \u0027evil\u0027 the attacker could mimic a valid TuneD log line and trick the administrator. The quotes \u0027\u0027 are usually used in TuneD logs citing raw user input, so there will always be the \u0027 character ending the spoofed input, and the administrator can easily overlook this. This logged string is later used in logging and in the output of utilities, for example, `tuned-adm get_instances` or other third-party programs that use Tuned\u0027s D-Bus interface for such operations."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Moderate"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-20",
                  "description": "Improper Input Validation",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-06-26T01:03:11.731Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHSA-2024:10381",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:10381"
            },
            {
              "name": "RHSA-2024:10384",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:10384"
            },
            {
              "name": "RHSA-2024:11161",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:11161"
            },
            {
              "name": "RHSA-2025:0195",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0195"
            },
            {
              "name": "RHSA-2025:0327",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0327"
            },
            {
              "name": "RHSA-2025:0368",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0368"
            },
            {
              "name": "RHSA-2025:0879",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0879"
            },
            {
              "name": "RHSA-2025:0880",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0880"
            },
            {
              "name": "RHSA-2025:0881",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0881"
            },
            {
              "name": "RHSA-2025:1785",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1785"
            },
            {
              "name": "RHSA-2025:1802",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:1802"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2024-52337"
            },
            {
              "name": "RHBZ#2324541",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2324541"
            },
            {
              "url": "https://github.com/redhat-performance/tuned/releases/tag/v2.24.1"
            },
            {
              "url": "https://security.opensuse.org/2024/11/26/tuned-instance-create.html"
            },
            {
              "url": "https://www.openwall.com/lists/oss-security/2024/11/28/1"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2024-11-08T12:56:07.615Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2024-11-26T12:00:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method",
          "workarounds": [
            {
              "lang": "en",
              "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_redhatCweChain": "CWE-20: Improper Input Validation"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2024-52337",
        "datePublished": "2024-11-26T15:21:17.538Z",
        "dateReserved": "2024-11-08T13:09:39.005Z",
        "dateUpdated": "2026-06-26T01:03:11.731Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2024-52336 (GCVE-0-2024-52336)

    Vulnerability from cvelistv5 – Published: 2024-11-26 15:21 – Updated: 2026-06-26 00:51
    VLAI
    Title
    Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root
    Summary
    A script injection vulnerability was identified in the Tuned package. The `instance_create()` D-Bus function can be called by locally logged-in users without authentication. This flaw allows a local non-privileged user to execute a D-Bus call with `script_pre` or `script_post` options that permit arbitrary scripts with their absolute paths to be passed. These user or attacker-controlled executable scripts or programs could then be executed by Tuned with root privileges that could allow attackers to local privilege escalation.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-269 - Improper Privilege Management
    Assigner
    Impacted products
    Vendor Product Version
    Affected: 2.23.0 , < 2.24.1 (semver)
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:2.24.0-2.1.20240819gitc082797f.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:2.24.0-2.1.20240819gitc082797f.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 0:2.24.0-2.el9_5 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9::appstream
        cpe:/a:redhat:enterprise_linux:9::nfv
        cpe:/a:redhat:enterprise_linux:9::realtime
        cpe:/a:redhat:enterprise_linux:9::sap
        cpe:/a:redhat:enterprise_linux:9::sap_hana
        cpe:/o:redhat:enterprise_linux:9::baseos
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 7     cpe:/o:redhat:enterprise_linux:7::fastdatapath
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10     cpe:/o:redhat:enterprise_linux:10
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 6     cpe:/o:redhat:enterprise_linux:6
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 7     cpe:/o:redhat:enterprise_linux:7
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    Create a notification for this product.
    Date Public
    2024-11-26 12:00
    Credits
    Red Hat would like to thank Matthias Gerstner (SUSE Security Team) for reporting this issue.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-52336",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-11-26T16:22:02.290977Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-11-26T16:22:12.371Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "providerMetadata": {
              "dateUpdated": "2024-11-29T04:32:53.450Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "https://www.openwall.com/lists/oss-security/2024/11/28/2"
              },
              {
                "url": "https://security.opensuse.org/2024/11/26/tuned-instance-create.html"
              }
            ],
            "title": "CVE Program Container",
            "x_generator": {
              "engine": "ADPogram 0.0.1"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://github.com/redhat-performance/tuned",
              "defaultStatus": "unaffected",
              "packageName": "tuned",
              "versions": [
                {
                  "lessThan": "2.24.1",
                  "status": "affected",
                  "version": "2.23.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.24.0-2.1.20240819gitc082797f.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.24.0-2.1.20240819gitc082797f.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:enterprise_linux:9::appstream",
                "cpe:/a:redhat:enterprise_linux:9::nfv",
                "cpe:/a:redhat:enterprise_linux:9::realtime",
                "cpe:/a:redhat:enterprise_linux:9::sap",
                "cpe:/a:redhat:enterprise_linux:9::sap_hana",
                "cpe:/o:redhat:enterprise_linux:9::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.24.0-2.el9_5",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:enterprise_linux:9::appstream",
                "cpe:/a:redhat:enterprise_linux:9::nfv",
                "cpe:/a:redhat:enterprise_linux:9::realtime",
                "cpe:/a:redhat:enterprise_linux:9::sap",
                "cpe:/a:redhat:enterprise_linux:9::sap_hana",
                "cpe:/o:redhat:enterprise_linux:9::baseos"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:2.24.0-2.el9_5",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "unaffected",
              "packageName": "tuned",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:10"
              ],
              "defaultStatus": "affected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 10",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:6"
              ],
              "defaultStatus": "unaffected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 6",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7"
              ],
              "defaultStatus": "unaffected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8"
              ],
              "defaultStatus": "unaffected",
              "packageName": "tuned",
              "product": "Red Hat Enterprise Linux 8",
              "vendor": "Red Hat"
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "Red Hat would like to thank Matthias Gerstner (SUSE Security Team) for reporting this issue."
            }
          ],
          "datePublic": "2024-11-26T12:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A script injection vulnerability was identified in the Tuned package. The `instance_create()` D-Bus function can be called by locally logged-in users without authentication. This flaw allows a local non-privileged user to execute a D-Bus call with `script_pre` or `script_post` options that permit arbitrary scripts with their absolute paths to be passed. These user or attacker-controlled executable scripts or programs could then be executed by Tuned with root privileges that could allow attackers to local privilege escalation."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Important"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-269",
                  "description": "Improper Privilege Management",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-06-26T00:51:25.852Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHSA-2024:10384",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:10384"
            },
            {
              "name": "RHSA-2025:0879",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0879"
            },
            {
              "name": "RHSA-2025:0880",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2025:0880"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2024-52336"
            },
            {
              "name": "RHBZ#2324540",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2324540"
            },
            {
              "url": "https://github.com/redhat-performance/tuned/releases/tag/v2.24.1"
            },
            {
              "url": "https://security.opensuse.org/2024/11/26/tuned-instance-create.html"
            },
            {
              "url": "https://www.openwall.com/lists/oss-security/2024/11/28/1"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2024-11-08T00:00:00.000Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2024-11-26T12:00:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root",
          "workarounds": [
            {
              "lang": "en",
              "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_redhatCweChain": "CWE-269: Improper Privilege Management"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2024-52336",
        "datePublished": "2024-11-26T15:21:13.518Z",
        "dateReserved": "2024-11-08T13:09:39.004Z",
        "dateUpdated": "2026-06-26T00:51:25.852Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2024-2182 (GCVE-0-2024-2182)

    Vulnerability from cvelistv5 – Published: 2024-03-12 16:18 – Updated: 2025-11-08 07:11
    VLAI
    Title
    Ovn: insufficient validation of bfd packets may lead to denial of service
    Summary
    A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-346 - Origin Validation Error
    Assigner
    Impacted products
    Vendor Product Version
    Affected: 20.03.0 , < * (semver)
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:23.06.1-112.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:22.12.1-94.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:22.03.3-71.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:23.03.1-100.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 8 Unaffected: 0:21.12.0-142.el8fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:23.09.0-136.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:23.06.1-112.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:22.12.1-94.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:22.03.3-71.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for Red Hat Enterprise Linux 9 Unaffected: 0:23.03.1-100.el9fdp , < * (rpm)
        cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 7     cpe:/o:redhat:enterprise_linux:7::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 8     cpe:/o:redhat:enterprise_linux:8::fastdatapath
    Create a notification for this product.
    Red Hat Fast Datapath for RHEL 9     cpe:/o:redhat:enterprise_linux:9::fastdatapath
    Create a notification for this product.
    Date Public
    2024-03-12 00:00
    Credits
    Red Hat would like to thank Frode Nordahl (Canonical) for reporting this issue.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-2182",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-03-13T14:24:40.610508Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-04-15T15:26:18.815Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-01T19:03:39.232Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "http://www.openwall.com/lists/oss-security/2024/03/12/5"
              },
              {
                "name": "RHSA-2024:1385",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2024:1385"
              },
              {
                "name": "RHSA-2024:1386",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2024:1386"
              },
              {
                "name": "RHSA-2024:1387",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2024:1387"
              },
              {
                "name": "RHSA-2024:1388",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2024:1388"
              },
              {
                "name": "RHSA-2024:1390",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2024:1390"
              },
              {
                "name": "RHSA-2024:1391",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2024:1391"
              },
              {
                "name": "RHSA-2024:1392",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2024:1392"
              },
              {
                "name": "RHSA-2024:1393",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2024:1393"
              },
              {
                "name": "RHSA-2024:1394",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2024:1394"
              },
              {
                "name": "RHSA-2024:4035",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2024:4035"
              },
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2024-2182"
              },
              {
                "name": "RHBZ#2267840",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267840"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APR4GCVCMQD3DQUKXDNGIXCCYGE5V7IT/"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CB4N522FCS4XWAPUKRWZF6QZ657FCIDF/"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XRKXOOOKD56TY3JQVB45N3GCTX3EG4BV/"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://mail.openvswitch.org/pipermail/ovs-announce/2024-March/000346.html"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.openwall.com/lists/oss-security/2024/03/12/5"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://www.github.com/ovn-org/ovn/",
              "defaultStatus": "unaffected",
              "packageName": "ovn",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "affected",
                  "version": "20.03.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.06",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.06.1-112.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.12",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.12.1-94.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.03.3-71.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.03.1-100.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn-2021",
              "product": "Fast Datapath for Red Hat Enterprise Linux 8",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:21.12.0-142.el8fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.09",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.09.0-136.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.06",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.06.1-112.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.12",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.12.1-94.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn22.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:22.03.3-71.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn23.03",
              "product": "Fast Datapath for Red Hat Enterprise Linux 9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "0:23.03.1-100.el9fdp",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn2.11",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn2.12",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn2.13",
              "product": "Fast Datapath for RHEL 7",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn2.11",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn2.12",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn2.13",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn22.06",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn22.09",
              "product": "Fast Datapath for RHEL 8",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "affected",
              "packageName": "ovn-2021",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn22.06",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
              ],
              "defaultStatus": "unknown",
              "packageName": "ovn22.09",
              "product": "Fast Datapath for RHEL 9",
              "vendor": "Red Hat"
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "Red Hat would like to thank Frode Nordahl (Canonical) for reporting this issue."
            }
          ],
          "datePublic": "2024-03-12T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Moderate"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-346",
                  "description": "Origin Validation Error",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2025-11-08T07:11:46.026Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHSA-2024:1385",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:1385"
            },
            {
              "name": "RHSA-2024:1386",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:1386"
            },
            {
              "name": "RHSA-2024:1387",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:1387"
            },
            {
              "name": "RHSA-2024:1388",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:1388"
            },
            {
              "name": "RHSA-2024:1390",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:1390"
            },
            {
              "name": "RHSA-2024:1391",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:1391"
            },
            {
              "name": "RHSA-2024:1392",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:1392"
            },
            {
              "name": "RHSA-2024:1393",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:1393"
            },
            {
              "name": "RHSA-2024:1394",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:1394"
            },
            {
              "name": "RHSA-2024:4035",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2024:4035"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2024-2182"
            },
            {
              "name": "RHBZ#2267840",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267840"
            },
            {
              "url": "https://mail.openvswitch.org/pipermail/ovs-announce/2024-March/000346.html"
            },
            {
              "url": "https://www.openwall.com/lists/oss-security/2024/03/12/5"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2024-03-04T00:00:00.000Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2024-03-12T00:00:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Ovn: insufficient validation of bfd packets may lead to denial of service",
          "x_redhatCweChain": "CWE-346: Origin Validation Error"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2024-2182",
        "datePublished": "2024-03-12T16:18:31.829Z",
        "dateReserved": "2024-03-05T00:40:55.429Z",
        "dateUpdated": "2025-11-08T07:11:46.026Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }