Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2026-34956

Openvswitch: open vswitch: denial of service via malformed ftp epasv command

Description

A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can send a specially crafted FTP stream with an EPASV command exceeding 255 characters. This heap access error can lead to a crash, resulting in a Denial of Service (DoS) for the affected system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Fast Datapath for RHEL 7

Default version status: affected

Red Hat Fast Datapath for RHEL 7

Default version status: affected

Red Hat Fast Datapath for RHEL 7

Default version status: affected

Red Hat Fast Datapath for RHEL 7

Default version status: affected

Red Hat Fast Datapath for RHEL 7

Default version status: affected

Red Hat Fast Datapath for RHEL 7

Default version status: affected

Red Hat Fast Datapath for RHEL 7

Default version status: affected

Red Hat Fast Datapath for RHEL 7

Default version status: affected

Red Hat Fast Datapath for RHEL 8

Default version status: affected

Red Hat Fast Datapath for RHEL 8

Default version status: affected

Red Hat Fast Datapath for RHEL 8

Default version status: affected

Red Hat Fast Datapath for RHEL 8

Default version status: affected

Red Hat Fast Datapath for RHEL 8

Default version status: affected

Red Hat Fast Datapath for RHEL 8

Default version status: affected

Red Hat Fast Datapath for RHEL 8

Default version status: affected

Red Hat Fast Datapath for RHEL 8

Default version status: affected

Red Hat Fast Datapath for RHEL 8

Default version status: affected

Red Hat Fast Datapath for RHEL 8

Default version status: affected

Red Hat Fast Datapath for RHEL 9

Default version status: affected

Red Hat Fast Datapath for RHEL 9

Default version status: affected

Red Hat Fast Datapath for RHEL 9

Default version status: affected

Red Hat Fast Datapath for RHEL 9

Default version status: affected

Red Hat Fast Datapath for RHEL 9

Default version status: affected

Red Hat Fast Datapath for RHEL 9

Default version status: affected

Red Hat Fast Datapath for RHEL 9

Default version status: affected

Red Hat Fast Datapath for RHEL 9

Default version status: affected

Red Hat Fast Datapath for RHEL 9

Default version status: affected

Red Hat Red Hat Enterprise Linux 7

Default version status: affected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

Red Hat Red Hat OpenStack Platform 13 (Queens)

Default version status: affected

Red Hat Red Hat OpenStack Platform 13 (Queens)

Default version status: affected

Red Hat Red Hat OpenStack Platform 13 (Queens)

Default version status: affected

Red Hat Red Hat OpenStack Platform 16.2

Default version status: affected

Red Hat Red Hat OpenStack Platform 16.2

Default version status: affected

Red Hat Red Hat OpenStack Platform 17.1

Default version status: affected

Red Hat Red Hat OpenStack Platform 17.1

Default version status: affected

Red Hat Red Hat OpenStack Platform 18.0

Default version status: affected

References