An update of the openvswitch package has been released.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:0619-1 advisory.

    - CVE-2024-2182: Fixed insufficient validation of incoming       BFD packets may lead to denial of service (bsc#1255435)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1386 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network     abstraction.  OVN complements the existing capabilities of OVS to add     native support for virtual network abstractions, such as virtual L2 and L3     overlays and security groups.

    Security fix(es):

    * ovn22.12: insufficient validation of BFD packets may lead to denial of service (CVE-2024-2182)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References     section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1391 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network     abstraction.  OVN complements the existing capabilities of OVS to add     native support for virtual network abstractions, such as virtual L2 and L3     overlays and security groups.

    Security fix(es):

    * ovn23.06: insufficient validation of BFD packets may lead to denial of service (CVE-2024-2182)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References     section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1393 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network     abstraction.  OVN complements the existing capabilities of OVS to add     native support for virtual network abstractions, such as virtual L2 and L3     overlays and security groups.

    Security fix(es):

    * ovn22.03: insufficient validation of BFD packets may lead to denial of service (CVE-2024-2182)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References     section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-7c11edcd20 advisory.

    Security fix for CVE-2024-2182 ovn: insufficient validation of BFD packets may lead to denial of service     [fedora-all]

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0280-1 advisory.

    Update to v3.1.7:

     - CVE-2023-3966: openvswitch, openvswitch3: Invalid memory access in Geneve with HW offload     (bsc#1219465).
     - CVE-2024-2182: openvswitch: ov: insufficient validation of incoming BFD packets may lead to denial of     service (bsc#1255435).
     - CVE-2023-1668: openvswitch: remote traffic denial of service via crafted packets with IP proto 0     (bsc#1210054).
     - CVE-2023-3153: openvswitch,openvswitch3: service monitor MAC flow is not rate limited (bsc#1212125).
     - CVE-2023-5366: openvswitch: missing masks on a final stage with ports trie (bsc#1216002).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
203770	Photon OS 3.0: Openvswitch PHSA-2024-3.0-0738	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	medium
299932	SUSE SLES12 Security Update : openvswitch (SUSE-SU-2026:0619-1)	Nessus	SuSE Local Security Checks	2026/2/25	2026/2/25	medium
192258	RHEL 8 : ovn22.12 (RHSA-2024:1386)	Nessus	Red Hat Local Security Checks	2024/3/19	2024/11/7	medium
192261	RHEL 9 : ovn23.06 (RHSA-2024:1391)	Nessus	Red Hat Local Security Checks	2024/3/19	2024/11/7	medium
192262	RHEL 9 : ovn22.03 (RHSA-2024:1393)	Nessus	Red Hat Local Security Checks	2024/3/19	2024/11/7	medium
192460	Fedora 38 : ovn (2024-7c11edcd20)	Nessus	Fedora Local Security Checks	2024/3/22	2024/11/14	medium
296468	SUSE SLES15 / openSUSE 15 Security Update : openvswitch (SUSE-SU-2026:0280-1)	Nessus	SuSE Local Security Checks	2026/1/24	2026/2/3	high

检测

插件搜索

medium

medium

medium

medium

medium

medium

high