A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openvswitch | Aug 22, 2024 | Oct 6, 2023 |
| Debian | — | Upgrade openvswitch | Feb 23, 2024 | Oct 6, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 6, 2023 |
| Suse | — | Upgrade openvswitch-ipsecUpgrade openvswitch-develUpgrade libovn-23_03-0Upgrade ovn-centralUpgrade python3-ovsUpgrade ovn3-vtepUpgrade ovn-hostUpgrade libovn-20_06-0Upgrade ovn3Upgrade ovn3-hostUpgrade openvswitch-vtepUpgrade openvswitch3-ipsecUpgrade openvswitch-pkiUpgrade ovn-vtepUpgrade openvswitch3-vtepUpgrade ovn-docUpgrade ovn-dockerUpgrade openvswitch3-docUpgrade openvswitch3-pkiUpgrade openvswitchUpgrade libopenvswitch-2_14-0Upgrade openvswitch-docUpgrade openvswitch3Upgrade ovnUpgrade openvswitch3-develUpgrade openvswitch-testUpgrade libopenvswitch-2_13-0Upgrade ovn3-centralUpgrade python3-ovs3Upgrade ovn3-dockerUpgrade ovn3-docUpgrade libopenvswitch-3_1-0Upgrade libovn-20_03-0Upgrade ovn3-develUpgrade ovn-develUpgrade openvswitch3-test | Nov 22, 2023 | Oct 6, 2023 |
| Ubuntu | — | Upgrade openvswitch-common (Ubuntu Pro)Upgrade openvswitch-commonUpgrade python3-openvswitch | Nov 27, 2023 | Oct 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub