The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0280-1 advisory.

    Update to v3.1.7:

     - CVE-2023-3966: openvswitch, openvswitch3: Invalid memory access in Geneve with HW offload     (bsc#1219465).
     - CVE-2024-2182: openvswitch: ov: insufficient validation of incoming BFD packets may lead to denial of     service (bsc#1255435).
     - CVE-2023-1668: openvswitch: remote traffic denial of service via crafted packets with IP proto 0     (bsc#1210054).
     - CVE-2023-3153: openvswitch,openvswitch3: service monitor MAC flow is not rate limited (bsc#1212125).
     - CVE-2023-5366: openvswitch: missing masks on a final stage with ports trie (bsc#1216002).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6690-1 advisory.

    Timothy Redaelli and Haresh Khandelwal discovered that Open vSwitch incorrectly handled certain crafted     Geneve packets when hardware offloading via the netlink path is enabled. A remote attacker could possibly     use this issue to cause Open vSwitch to crash, leading to a denial of service. (CVE-2023-3966)

    It was discovered that Open vSwitch incorrectly handled certain ICMPv6 Neighbor Advertisement packets. A     remote attacker could possibly use this issue to redirect traffic to arbitrary IP addresses.
    (CVE-2023-5366)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual     machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted     packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary     IP addresses. (CVE-2023-5366)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0631 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-3966:
    A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which     may result in a denial of service and invalid memory accesses. Triggering this issue requires that     hardware offloading via the netlink path is enabled.

    CVE-2023-5366:
    A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual     machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted     packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary     IP addresses.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0290-1 advisory.

    Update to v3.1.7:

     - CVE-2023-3966: openvswitch, openvswitch3: Invalid memory access in Geneve with HW offload     (bsc#1219465).
     - CVE-2024-2182: openvswitch: ov: insufficient validation of incoming BFD packets may lead to denial of     service (bsc#1255435).
     - CVE-2023-1668: openvswitch: remote traffic denial of service via crafted packets with IP proto 0     (bsc#1210054).
     - CVE-2023-3153: openvswitch,openvswitch3: service monitor MAC flow is not rate limited (bsc#1212125).
     - CVE-2023-5366: openvswitch: missing masks on a final stage with ports trie (bsc#1216002).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4573-1 advisory.

  - A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual     machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted     packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary     IP addresses. (CVE-2023-5366)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4571-1 advisory.

  - A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual     machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted     packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary     IP addresses. (CVE-2023-5366)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4657-1 advisory.

  - A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual     machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted     packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary     IP addresses. (CVE-2023-5366)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
296468	SUSE SLES15 / openSUSE 15 Security Update : openvswitch (SUSE-SU-2026:0280-1)	Nessus	SuSE Local Security Checks	2026/1/24	2026/2/3	high
191928	Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : Open vSwitch vulnerabilities (USN-6690-1)	Nessus	Ubuntu Local Security Checks	2024/3/12	2024/8/27	medium
226516	Linux Distros Unpatched Vulnerability : CVE-2023-5366	Nessus	Misc.	2025/3/5	2025/8/20	medium
239780	TencentOS Server 4: openvswitch (TSSA-2024:0631)	Nessus	Tencent Local Security Checks	2025/6/16	2025/12/4	medium
296678	SUSE SLES15 / openSUSE 15 Security Update : openvswitch3 (SUSE-SU-2026:0290-1)	Nessus	SuSE Local Security Checks	2026/1/27	2026/2/3	high
186346	SUSE SLES15 / openSUSE 15 Security Update : openvswitch (SUSE-SU-2023:4573-1)	Nessus	SuSE Local Security Checks	2023/11/28	2023/12/21	medium
186348	SUSE SLES15 / openSUSE 15 Security Update : openvswitch (SUSE-SU-2023:4571-1)	Nessus	SuSE Local Security Checks	2023/11/28	2023/12/21	medium
186638	SUSE SLES15 / openSUSE 15 Security Update : openvswitch3 (SUSE-SU-2023:4657-1)	Nessus	SuSE Local Security Checks	2023/12/7	2023/12/21	medium

检测

插件搜索

high

medium

medium

medium

high

medium

medium

medium