2 lines
16 KiB
JSON
2 lines
16 KiB
JSON
{"affected":[{"affectedData":[{"collectionURL":"https://www.github.com/ovn-org/ovn/","defaultStatus":"unaffected","packageName":"ovn","versions":[{"lessThan":"*","status":"affected","version":"20.03.0","versionType":"semver"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::fastdatapath"],"defaultStatus":"affected","packageName":"ovn23.06","product":"Fast Datapath for Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:23.06.1-112.el8fdp","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::fastdatapath"],"defaultStatus":"affected","packageName":"ovn22.12","product":"Fast Datapath for Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:22.12.1-94.el8fdp","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::fastdatapath"],"defaultStatus":"affected","packageName":"ovn22.03","product":"Fast Datapath for Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:22.03.3-71.el8fdp","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::fastdatapath"],"defaultStatus":"affected","packageName":"ovn23.03","product":"Fast Datapath for Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:23.03.1-100.el8fdp","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::fastdatapath"],"defaultStatus":"affected","packageName":"ovn-2021","product":"Fast Datapath for Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:21.12.0-142.el8fdp","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9::fastdatapath"],"defaultStatus":"affected","packageName":"ovn23.09","product":"Fast Datapath for Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:23.09.0-136.el9fdp","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9::fastdatapath"],"defaultStatus":"affected","packageName":"ovn23.06","product":"Fast Datapath for Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:23.06.1-112.el9fdp","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9::fastdatapath"],"defaultStatus":"affected","packageName":"ovn22.12","product":"Fast Datapath for Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:22.12.1-94.el9fdp","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9::fastdatapath"],"defaultStatus":"affected","packageName":"ovn22.03","product":"Fast Datapath for Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:22.03.3-71.el9fdp","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9::fastdatapath"],"defaultStatus":"affected","packageName":"ovn23.03","product":"Fast Datapath for Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:23.03.1-100.el9fdp","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10::fastdatapath"],"defaultStatus":"affected","packageName":"ovn25.03","product":"Fast Datapath for RHEL 10","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10::fastdatapath"],"defaultStatus":"affected","packageName":"ovn25.09","product":"Fast Datapath for RHEL 10","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10::fastdatapath"],"defaultStatus":"affected","packageName":"ovn26.03","product":"Fast Datapath for RHEL 10","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7::fastdatapath"],"defaultStatus":"unknown","packageName":"ovn2.11","product":"Fast Datapath for RHEL 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7::fastdatapath"],"defaultStatus":"unknown","packageName":"ovn2.12","product":"Fast Datapath for RHEL 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7::fastdatapath"],"defaultStatus":"unknown","packageName":"ovn2.13","product":"Fast Datapath for RHEL 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::fastdatapath"],"defaultStatus":"unknown","packageName":"ovn2.11","product":"Fast Datapath for RHEL 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::fastdatapath"],"defaultStatus":"unknown","packageName":"ovn2.12","product":"Fast Datapath for RHEL 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::fastdatapath"],"defaultStatus":"unknown","packageName":"ovn2.13","product":"Fast Datapath for RHEL 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::fastdatapath"],"defaultStatus":"unknown","packageName":"ovn22.06","product":"Fast Datapath for RHEL 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::fastdatapath"],"defaultStatus":"unknown","packageName":"ovn22.09","product":"Fast Datapath for RHEL 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9::fastdatapath"],"defaultStatus":"affected","packageName":"ovn-2021","product":"Fast Datapath for RHEL 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9::fastdatapath"],"defaultStatus":"unknown","packageName":"ovn22.06","product":"Fast Datapath for RHEL 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9::fastdatapath"],"defaultStatus":"unknown","packageName":"ovn22.09","product":"Fast Datapath for RHEL 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9::fastdatapath"],"defaultStatus":"affected","packageName":"ovn24.03","product":"Fast Datapath for RHEL 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9::fastdatapath"],"defaultStatus":"affected","packageName":"ovn24.09","product":"Fast Datapath for RHEL 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9::fastdatapath"],"defaultStatus":"affected","packageName":"ovn25.03","product":"Fast Datapath for RHEL 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9::fastdatapath"],"defaultStatus":"affected","packageName":"ovn25.09","product":"Fast Datapath for RHEL 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9::fastdatapath"],"defaultStatus":"affected","packageName":"ovn26.03","product":"Fast Datapath for RHEL 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"ovn22.06","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"ovn22.09","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"ovn22.12","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"ovn23.03","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"ovn23.06","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"ovn23.09","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"ovn24.03","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"ovn24.09","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:13"],"defaultStatus":"unknown","packageName":"ovn2.11","product":"Red Hat OpenStack Platform 13 (Queens)","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service."},{"lang":"es","value":"Se encontró una falla en la Red Virtual Abierta (OVN). En los clústeres OVN donde se utiliza BFD entre hipervisores para alta disponibilidad, un atacante puede inyectar paquetes BFD especialmente manipulados desde cargas de trabajo sin privilegios, incluidas máquinas virtuales o contenedores, que pueden desencadenar una denegación de servicio."}],"id":"CVE-2024-2182","lastModified":"2026-10-19T11:17:15.617","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-2182","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-03-13T14:24:40.610508Z","version":"2.0.3"}}]},"published":"2024-03-12T17:15:59.190","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:1385"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:1386"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:1387"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:1388"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:1390"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:1391"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:1392"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:1393"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:1394"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2024:4035"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2024-2182"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2267840"},{"source":"secalert@redhat.com","url":"https://mail.openvswitch.org/pipermail/ovs-announce/2024-March/000346.html"},{"source":"secalert@redhat.com","url":"https://www.openwall.com/lists/oss-security/2024/03/12/5"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2024/03/12/5"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:1385"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:1386"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:1387"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:1388"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:1390"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:1391"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:1392"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:1393"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:1394"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2024:4035"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/security/cve/CVE-2024-2182"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2267840"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APR4GCVCMQD3DQUKXDNGIXCCYGE5V7IT/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CB4N522FCS4XWAPUKRWZF6QZ657FCIDF/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XRKXOOOKD56TY3JQVB45N3GCTX3EG4BV/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://mail.openvswitch.org/pipermail/ovs-announce/2024-March/000346.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.openwall.com/lists/oss-security/2024/03/12/5"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-346"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|