vulnerability

CentOS Linux: CVE-2019-14818: Moderate: openvswitch security and bug fix update (Multiple Advisories)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Nov 14, 2019
Added
Jan 22, 2020
Modified
May 25, 2023

Description

A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory leak including file descriptors. This flaw could lead to a denial of service condition.

Solution(s)

centos-upgrade-dpdkcentos-upgrade-dpdk-debuginfocentos-upgrade-dpdk-debugsourcecentos-upgrade-dpdk-develcentos-upgrade-dpdk-devel-debuginfocentos-upgrade-dpdk-doccentos-upgrade-dpdk-toolscentos-upgrade-network-scripts-openvswitch2-11centos-upgrade-network-scripts-openvswitch2-12centos-upgrade-openvswitchcentos-upgrade-openvswitch-debuginfocentos-upgrade-openvswitch-develcentos-upgrade-openvswitch-ovn-centralcentos-upgrade-openvswitch-ovn-commoncentos-upgrade-openvswitch-ovn-hostcentos-upgrade-openvswitch-ovn-vtepcentos-upgrade-openvswitch-testcentos-upgrade-openvswitch2-11centos-upgrade-openvswitch2-11-debuginfocentos-upgrade-openvswitch2-11-debugsourcecentos-upgrade-openvswitch2-11-develcentos-upgrade-openvswitch2-11-testcentos-upgrade-openvswitch2-12centos-upgrade-openvswitch2-12-debuginfocentos-upgrade-openvswitch2-12-debugsourcecentos-upgrade-openvswitch2-12-develcentos-upgrade-openvswitch2-12-testcentos-upgrade-python-openvswitchcentos-upgrade-python-openvswitch2-11centos-upgrade-python-openvswitch2-12centos-upgrade-python3-openvswitch2-11centos-upgrade-python3-openvswitch2-11-debuginfocentos-upgrade-python3-openvswitch2-12centos-upgrade-python3-openvswitch2-12-debuginfo
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.