UBUNTU-CVE-2021-3905

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2021-3905

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-3905.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2021-3905

Related

CVE-2021-3905
USN-5242-1

Published

2021-11-08T00:00:00Z

Modified

2025-01-13T10:22:26Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments.

References

Affected packages

Ubuntu:18.04:LTS / openvswitch

Package

Name: openvswitch
Purl: pkg:deb/ubuntu/openvswitch@2.9.8-0ubuntu0.18.04.2?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.9.8-0ubuntu0.18.04.2

Affected versions

2.*

2.8.0-0ubuntu2

2.8.1-0ubuntu2

2.8.1-0ubuntu3

2.9.0~git20180205.5a39582ca-0ubuntu1

2.9.0-0ubuntu1

2.9.2-0ubuntu0.18.04.2

2.9.2-0ubuntu0.18.04.3

2.9.5-0ubuntu0.18.04.1

2.9.7-0ubuntu0.18.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openvswitch-common",
            "binary_version": "2.9.8-0ubuntu0.18.04.2"
        },
        {
            "binary_name": "openvswitch-dbg",
            "binary_version": "2.9.8-0ubuntu0.18.04.2"
        },
        {
            "binary_name": "openvswitch-doc",
            "binary_version": "2.9.8-0ubuntu0.18.04.2"
        },
        {
            "binary_name": "openvswitch-pki",
            "binary_version": "2.9.8-0ubuntu0.18.04.2"
        },
        {
            "binary_name": "openvswitch-switch",
            "binary_version": "2.9.8-0ubuntu0.18.04.2"
        },
        {
            "binary_name": "openvswitch-switch-dpdk",
            "binary_version": "2.9.8-0ubuntu0.18.04.2"
        },
        {
            "binary_name": "openvswitch-test",
            "binary_version": "2.9.8-0ubuntu0.18.04.2"
        },
        {
            "binary_name": "openvswitch-testcontroller",
            "binary_version": "2.9.8-0ubuntu0.18.04.2"
        },
        {
            "binary_name": "openvswitch-vtep",
            "binary_version": "2.9.8-0ubuntu0.18.04.2"
        },
        {
            "binary_name": "ovn-central",
            "binary_version": "2.9.8-0ubuntu0.18.04.2"
        },
        {
            "binary_name": "ovn-common",
            "binary_version": "2.9.8-0ubuntu0.18.04.2"
        },
        {
            "binary_name": "ovn-controller-vtep",
            "binary_version": "2.9.8-0ubuntu0.18.04.2"
        },
        {
            "binary_name": "ovn-docker",
            "binary_version": "2.9.8-0ubuntu0.18.04.2"
        },
        {
            "binary_name": "ovn-host",
            "binary_version": "2.9.8-0ubuntu0.18.04.2"
        },
        {
            "binary_name": "python-openvswitch",
            "binary_version": "2.9.8-0ubuntu0.18.04.2"
        },
        {
            "binary_name": "python3-openvswitch",
            "binary_version": "2.9.8-0ubuntu0.18.04.2"
        }
    ],
    "availability": "No subscription required",
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / openvswitch

Package

Name: openvswitch
Purl: pkg:deb/ubuntu/openvswitch@2.13.3-0ubuntu0.20.04.2?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.13.3-0ubuntu0.20.04.2

Affected versions

2.*

2.12.0-0ubuntu1

2.12.0-0ubuntu2

2.12.1~git20191107.7accd1302-0ubuntu1

2.12.90~git20200107.af683565b-0ubuntu1

2.12.90~git20200107.af683565b-0ubuntu2

2.12.90~git20200107.af683565b-0ubuntu3

2.13.0~git20200127.dbdf66c29-0ubuntu2

2.13.0~git20200212.15ae9db33-0ubuntu1

2.13.0~git20200212.15ae9db33-0ubuntu2

2.13.0-0ubuntu1

2.13.1-0ubuntu0.20.04.1

2.13.1-0ubuntu0.20.04.3

2.13.1-0ubuntu0.20.04.4

2.13.3-0ubuntu0.20.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openvswitch-common",
            "binary_version": "2.13.3-0ubuntu0.20.04.2"
        },
        {
            "binary_name": "openvswitch-dbg",
            "binary_version": "2.13.3-0ubuntu0.20.04.2"
        },
        {
            "binary_name": "openvswitch-doc",
            "binary_version": "2.13.3-0ubuntu0.20.04.2"
        },
        {
            "binary_name": "openvswitch-pki",
            "binary_version": "2.13.3-0ubuntu0.20.04.2"
        },
        {
            "binary_name": "openvswitch-source",
            "binary_version": "2.13.3-0ubuntu0.20.04.2"
        },
        {
            "binary_name": "openvswitch-switch",
            "binary_version": "2.13.3-0ubuntu0.20.04.2"
        },
        {
            "binary_name": "openvswitch-switch-dpdk",
            "binary_version": "2.13.3-0ubuntu0.20.04.2"
        },
        {
            "binary_name": "openvswitch-test",
            "binary_version": "2.13.3-0ubuntu0.20.04.2"
        },
        {
            "binary_name": "openvswitch-testcontroller",
            "binary_version": "2.13.3-0ubuntu0.20.04.2"
        },
        {
            "binary_name": "openvswitch-vtep",
            "binary_version": "2.13.3-0ubuntu0.20.04.2"
        },
        {
            "binary_name": "python3-openvswitch",
            "binary_version": "2.13.3-0ubuntu0.20.04.2"
        }
    ],
    "availability": "No subscription required",
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / openvswitch

Package

Name: openvswitch
Purl: pkg:deb/ubuntu/openvswitch@2.17.0~git20220105.0d1ffb7-0ubuntu1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.17.0~git20220105.0d1ffb7-0ubuntu1

Affected versions

2.*

2.16.0-0ubuntu2

2.16.0-0ubuntu3

2.16.0-0ubuntu4

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openvswitch-common",
            "binary_version": "2.17.0~git20220105.0d1ffb7-0ubuntu1"
        },
        {
            "binary_name": "openvswitch-dbg",
            "binary_version": "2.17.0~git20220105.0d1ffb7-0ubuntu1"
        },
        {
            "binary_name": "openvswitch-doc",
            "binary_version": "2.17.0~git20220105.0d1ffb7-0ubuntu1"
        },
        {
            "binary_name": "openvswitch-ipsec",
            "binary_version": "2.17.0~git20220105.0d1ffb7-0ubuntu1"
        },
        {
            "binary_name": "openvswitch-pki",
            "binary_version": "2.17.0~git20220105.0d1ffb7-0ubuntu1"
        },
        {
            "binary_name": "openvswitch-source",
            "binary_version": "2.17.0~git20220105.0d1ffb7-0ubuntu1"
        },
        {
            "binary_name": "openvswitch-switch",
            "binary_version": "2.17.0~git20220105.0d1ffb7-0ubuntu1"
        },
        {
            "binary_name": "openvswitch-switch-dpdk",
            "binary_version": "2.17.0~git20220105.0d1ffb7-0ubuntu1"
        },
        {
            "binary_name": "openvswitch-test",
            "binary_version": "2.17.0~git20220105.0d1ffb7-0ubuntu1"
        },
        {
            "binary_name": "openvswitch-testcontroller",
            "binary_version": "2.17.0~git20220105.0d1ffb7-0ubuntu1"
        },
        {
            "binary_name": "openvswitch-vtep",
            "binary_version": "2.17.0~git20220105.0d1ffb7-0ubuntu1"
        },
        {
            "binary_name": "python3-openvswitch",
            "binary_version": "2.17.0~git20220105.0d1ffb7-0ubuntu1"
        }
    ],
    "availability": "No subscription required",
    "ubuntu_priority": "medium"
}