CVE-2024-2182
See a problem?- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-2182
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-2182.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-2182
- Related
- Published
- 2024-03-12T17:15:59Z
- Modified
- 2024-09-18T03:24:52.962639Z
- Summary
- [none]
- Details
-
A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service.
- References
-
- https://access.redhat.com/errata/RHSA-2024:1385
- https://access.redhat.com/errata/RHSA-2024:1386
- https://access.redhat.com/errata/RHSA-2024:1387
- https://access.redhat.com/errata/RHSA-2024:1388
- https://access.redhat.com/errata/RHSA-2024:1390
- https://access.redhat.com/errata/RHSA-2024:1391
- https://access.redhat.com/errata/RHSA-2024:1392
- https://access.redhat.com/errata/RHSA-2024:1393
- https://access.redhat.com/errata/RHSA-2024:1394
- https://access.redhat.com/errata/RHSA-2024:4035
- https://bugzilla.redhat.com/show_bug.cgi?id=2267840
- https://access.redhat.com/security/cve/CVE-2024-2182
- https://mail.openvswitch.org/pipermail/ovs-announce/2024-March/000346.html
- https://www.openwall.com/lists/oss-security/2024/03/12/5
- https://security-tracker.debian.org/tracker/CVE-2024-2182
Affected packages
Debian:12 / ovn
Package
- Name
- ovn
- Purl
- pkg:deb/debian/ovn?arch=source
Debian:13 / ovn
Package
- Name
- ovn
- Purl
- pkg:deb/debian/ovn?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed24.03.1-1