Description
A flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit. This issue could allow an attacker to cause a denial of service, including on deployments with CoPP enabled and properly configured.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a ovn
22.12.1unaffected22.03.3unaffected23.06.1unaffected23.03.1unaffected22.09.2unaffected
Red Hat Fast Datapath for RHEL 7
Default version status: affected
Red Hat Fast Datapath for RHEL 7
Default version status: affected
Red Hat Fast Datapath for RHEL 7
Default version status: affected
Red Hat Fast Datapath for RHEL 8
Default version status: affected
Red Hat Fast Datapath for RHEL 8
Default version status: affected
Red Hat Fast Datapath for RHEL 8
Default version status: affected
Red Hat Fast Datapath for RHEL 8
Default version status: affected
Red Hat Fast Datapath for RHEL 8
Default version status: affected
Red Hat Fast Datapath for RHEL 8
Default version status: affected
Red Hat Fast Datapath for RHEL 8
Default version status: affected
Red Hat Fast Datapath for RHEL 8
Default version status: affected
Red Hat Fast Datapath for RHEL 9
Default version status: affected
Red Hat Fast Datapath for RHEL 9
Default version status: affected
Red Hat Fast Datapath for RHEL 9
Default version status: affected
Red Hat Fast Datapath for RHEL 9
Default version status: affected
Red Hat Fast Datapath for RHEL 9
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
Red Hat Red Hat OpenStack Platform 13 (Queens)
Default version status: unknown
Fedora Fedora
Default version status: affected
References
- https://access.redhat.com/security/cve/CVE-2023-3153 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2213279 ↗
- https://github.com/ovn-org/ovn/commit/9a3f7ed905e525ebdcb14541e775211cbb0203bd ↗
- https://github.com/ovn-org/ovn/issues/198 ↗
- https://mail.openvswitch.org/pipermail/ovs-announce/2023-August/000327.html ↗
- https://mail.openvswitch.org/pipermail/ovs-dev/2023-August/407553.html ↗