AZL-86781

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-86781.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-86781

Upstream

CVE-2026-34956

Published

2026-05-05T16:16:11Z

Modified

2026-08-28T17:48:00.273993945Z

Summary

CVE-2026-34956 affecting package openvswitch for versions less than 3.3.0-3

Details

A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can send a specially crafted FTP stream with an EPASV command exceeding 255 characters. This heap access error can lead to a crash, resulting in a Denial of Service (DoS) for the affected system.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-34956

Affected packages

Azure Linux:3 / openvswitch

Package

Name: openvswitch
Purl: pkg:rpm/azure-linux/openvswitch

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.3.0-3

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-86781.json"