Description
A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a openvswitch (ovs)
Fixed in v2.17.0affected
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2019692 ↗
- https://access.redhat.com/security/cve/CVE-2021-3905 ↗
- https://ubuntu.com/security/CVE-2021-3905 ↗
- https://github.com/openvswitch/ovs-issues/issues/226 ↗
- https://github.com/openvswitch/ovs/commit/803ed12e31b0377c37d7aa8c94b3b92f2081e349 ↗
- https://security.gentoo.org/glsa/202311-16 ↗