Description
A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a openvswitch
Default version status: affected
Red Hat Fast Datapath for RHEL 7
Default version status: affected
Red Hat Fast Datapath for RHEL 7
Default version status: unknown
Red Hat Fast Datapath for RHEL 7
Default version status: unknown
Red Hat Fast Datapath for RHEL 7
Default version status: unknown
Red Hat Fast Datapath for RHEL 7
Default version status: affected
Red Hat Fast Datapath for RHEL 7
Default version status: affected
Red Hat Fast Datapath for RHEL 8
Default version status: unknown
Red Hat Fast Datapath for RHEL 8
Default version status: unknown
Red Hat Fast Datapath for RHEL 8
Default version status: affected
Red Hat Fast Datapath for RHEL 8
Default version status: affected
Red Hat Fast Datapath for RHEL 8
Default version status: unknown
Red Hat Fast Datapath for RHEL 8
Default version status: affected
Red Hat Fast Datapath for RHEL 8
Default version status: affected
Red Hat Fast Datapath for RHEL 9
Default version status: affected
Red Hat Fast Datapath for RHEL 9
Default version status: unknown
Red Hat Fast Datapath for RHEL 9
Default version status: affected
Red Hat Red Hat Enterprise Linux 7
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 3.11
Default version status: unknown
Red Hat Red Hat OpenShift Container Platform 4
Default version status: unknown
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
Red Hat Red Hat OpenStack Platform 16.1
Default version status: unaffected
Red Hat Red Hat OpenStack Platform 16.2
Default version status: unaffected
Red Hat Red Hat Virtualization 4
Default version status: affected
Red Hat Red Hat Virtualization 4
Default version status: affected
Fedora Fedora
Default version status: affected
References
- https://access.redhat.com/security/cve/CVE-2023-5366 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2006347 ↗
- http://www.openwall.com/lists/oss-security/2024/02/08/4 ↗
- https://lists.debian.org/debian-lts-announce/2024/02/msg00004.html ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VYYUBF6OW2JG7VOFEOROHXGSJCTES3QO/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LFZADABUDOFI2KZIRQBYFZCIKH55RGY3/ ↗