A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-openvswitch | Aug 22, 2024 | Oct 6, 2023 | |
| Debian | debian-upgrade-openvswitch | Feb 23, 2024 | Oct 6, 2023 | |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Oct 6, 2023 |
| Suse | — | suse-upgrade-libopenvswitch-2_13-0suse-upgrade-libopenvswitch-2_14-0suse-upgrade-libopenvswitch-3_1-0suse-upgrade-libovn-20_03-0suse-upgrade-libovn-20_06-0suse-upgrade-libovn-23_03-0suse-upgrade-openvswitchsuse-upgrade-openvswitch-develsuse-upgrade-openvswitch-docsuse-upgrade-openvswitch-ipsecsuse-upgrade-openvswitch-pkisuse-upgrade-openvswitch-testsuse-upgrade-openvswitch-vtepsuse-upgrade-openvswitch3suse-upgrade-openvswitch3-develsuse-upgrade-openvswitch3-docsuse-upgrade-openvswitch3-ipsecsuse-upgrade-openvswitch3-pkisuse-upgrade-openvswitch3-testsuse-upgrade-openvswitch3-vtepsuse-upgrade-ovnsuse-upgrade-ovn-centralsuse-upgrade-ovn-develsuse-upgrade-ovn-docsuse-upgrade-ovn-dockersuse-upgrade-ovn-hostsuse-upgrade-ovn-vtepsuse-upgrade-ovn3suse-upgrade-ovn3-centralsuse-upgrade-ovn3-develsuse-upgrade-ovn3-docsuse-upgrade-ovn3-dockersuse-upgrade-ovn3-hostsuse-upgrade-ovn3-vtepsuse-upgrade-python3-ovssuse-upgrade-python3-ovs3 | Nov 22, 2023 | Oct 6, 2023 |
| Ubuntu | ubuntu-pro-upgrade-openvswitch-commonubuntu-upgrade-openvswitch-commonubuntu-upgrade-python3-openvswitch | Nov 27, 2023 | Oct 6, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Oct 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub