2 lines
12 KiB
JSON
2 lines
12 KiB
JSON
{"affected":[{"affectedData":[{"product":"ovn","vendor":"n/a","versions":[{"status":"unaffected","version":"22.12.1"},{"status":"unaffected","version":"22.03.3"},{"status":"unaffected","version":"23.06.1"},{"status":"unaffected","version":"23.03.1"},{"status":"unaffected","version":"22.09.2"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7::fastdatapath"],"defaultStatus":"affected","packageName":"ovn2.11","product":"Fast Datapath for RHEL 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7::fastdatapath"],"defaultStatus":"affected","packageName":"ovn2.12","product":"Fast Datapath for RHEL 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7::fastdatapath"],"defaultStatus":"affected","packageName":"ovn2.13","product":"Fast Datapath for RHEL 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::fastdatapath"],"defaultStatus":"affected","packageName":"ovn-2021","product":"Fast Datapath for RHEL 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::fastdatapath"],"defaultStatus":"affected","packageName":"ovn2.11","product":"Fast Datapath for RHEL 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::fastdatapath"],"defaultStatus":"affected","packageName":"ovn2.12","product":"Fast Datapath for RHEL 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::fastdatapath"],"defaultStatus":"affected","packageName":"ovn2.13","product":"Fast Datapath for RHEL 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::fastdatapath"],"defaultStatus":"affected","packageName":"ovn22.03","product":"Fast Datapath for RHEL 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::fastdatapath"],"defaultStatus":"affected","packageName":"ovn22.06","product":"Fast Datapath for RHEL 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::fastdatapath"],"defaultStatus":"affected","packageName":"ovn22.09","product":"Fast Datapath for RHEL 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::fastdatapath"],"defaultStatus":"affected","packageName":"ovn22.12","product":"Fast Datapath for RHEL 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9::fastdatapath"],"defaultStatus":"affected","packageName":"ovn-2021","product":"Fast Datapath for RHEL 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9::fastdatapath"],"defaultStatus":"affected","packageName":"ovn22.03","product":"Fast Datapath for RHEL 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9::fastdatapath"],"defaultStatus":"affected","packageName":"ovn22.06","product":"Fast Datapath for RHEL 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9::fastdatapath"],"defaultStatus":"affected","packageName":"ovn22.09","product":"Fast Datapath for RHEL 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9::fastdatapath"],"defaultStatus":"affected","packageName":"ovn22.12","product":"Fast Datapath for RHEL 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"ovn-2021","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"ovn21.09","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"ovn21.12","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"ovn22.03","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"ovn22.06","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"ovn22.09","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"ovn22.12","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"ovn23.03","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:13"],"defaultStatus":"unknown","packageName":"ovn2.11","product":"Red Hat OpenStack Platform 13 (Queens)","vendor":"Red Hat"},{"collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected","packageName":"ovn","product":"Fedora","vendor":"Fedora"}],"source":"secalert@redhat.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:ovn:open_virtual_network:*:*:*:*:*:*:*:*","matchCriteriaId":"5CA7DFF4-C739-4EE8-AC5D-6EC06E387309","versionEndExcluding":"22.03.3","vulnerable":true},{"criteria":"cpe:2.3:a:ovn:open_virtual_network:*:*:*:*:*:*:*:*","matchCriteriaId":"66B2BA9A-04F3-4E63-B367-E7AE5AD04FB1","versionEndExcluding":"22.09.2","versionStartIncluding":"22.03.4","vulnerable":true},{"criteria":"cpe:2.3:a:ovn:open_virtual_network:*:*:*:*:*:*:*:*","matchCriteriaId":"393B5A8F-01A6-48E3-9D04-E9F5EDDCA555","versionEndExcluding":"22.12.1","versionStartIncluding":"22.09.3","vulnerable":true},{"criteria":"cpe:2.3:a:ovn:open_virtual_network:*:*:*:*:*:*:*:*","matchCriteriaId":"20978238-A456-4B17-B7AD-DC006C6B16A2","versionEndExcluding":"23.03.1","versionStartIncluding":"22.12.2","vulnerable":true},{"criteria":"cpe:2.3:a:ovn:open_virtual_network:*:*:*:*:*:*:*:*","matchCriteriaId":"D7AF4A0C-4E74-4721-96E0-E5A400B9AF58","versionEndExcluding":"23.06.1","versionStartIncluding":"23.03.2","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*","matchCriteriaId":"932D137F-528B-4526-9A89-CD59FA1AB0FE","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:redhat:fast_datapath:-:*:*:*:*:*:*:*","matchCriteriaId":"0A63D05D-BFAF-484B-BA49-5F5E399CDA02","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"7F6FB57C-2BC7-487C-96DD-132683AEB35D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit. This issue could allow an attacker to cause a denial of service, including on deployments with CoPP enabled and properly configured."},{"lang":"es","value":"Se encontró una falla en Open Virtual Network donde el monitor de servicio MAC no califica correctamente el límite. Este problema podría permitir que un atacante provoque una denegación de servicio, incluso en implementaciones con CoPP habilitado y configurado correctamente."}],"id":"CVE-2023-3153","lastModified":"2026-06-17T06:13:28.193","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"secalert@redhat.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-3153","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-09-19T14:24:33.931307Z","version":"2.0.3"}}]},"published":"2023-10-04T12:15:10.503","references":[{"source":"secalert@redhat.com","tags":["Third Party Advisory"],"url":"https://access.redhat.com/security/cve/CVE-2023-3153"},{"source":"secalert@redhat.com","tags":["Issue Tracking"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213279"},{"source":"secalert@redhat.com","tags":["Patch"],"url":"https://github.com/ovn-org/ovn/commit/9a3f7ed905e525ebdcb14541e775211cbb0203bd"},{"source":"secalert@redhat.com","tags":["Issue Tracking"],"url":"https://github.com/ovn-org/ovn/issues/198"},{"source":"secalert@redhat.com","tags":["Mitigation","Patch"],"url":"https://mail.openvswitch.org/pipermail/ovs-announce/2023-August/000327.html"},{"source":"secalert@redhat.com","tags":["Patch"],"url":"https://mail.openvswitch.org/pipermail/ovs-dev/2023-August/407553.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://access.redhat.com/security/cve/CVE-2023-3153"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213279"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://github.com/ovn-org/ovn/commit/9a3f7ed905e525ebdcb14541e775211cbb0203bd"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"],"url":"https://github.com/ovn-org/ovn/issues/198"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Patch"],"url":"https://mail.openvswitch.org/pipermail/ovs-announce/2023-August/000327.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://mail.openvswitch.org/pipermail/ovs-dev/2023-August/407553.html"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"}],"source":"secalert@redhat.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-770"}],"source":"nvd@nist.gov","type":"Primary"}]}
|