high7.5
CVE-2021-3905
A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing.
Impact
A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openvswitch | Openvswitch | before 2.17.0 |
| Redhat | Enterprise Linux Fast Datapath | Versions 7.0, 8.0 |
| Canonical | Ubuntu Linux | Version 21.10 |
| Fedoraproject | Fedora | Version 35 |
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/security/cve/CVE-2021-3905
- https://bugzilla.redhat.com/show_bug.cgi?id=2019692
- https://github.com/openvswitch/ovs-issues/issues/226
- https://github.com/openvswitch/ovs/commit/803ed12e31b0377c37d7aa8c94b3b92f2081e349
- https://security.gentoo.org/glsa/202311-16
- https://ubuntu.com/security/CVE-2021-3905
- https://access.redhat.com/security/cve/CVE-2021-3905
- https://bugzilla.redhat.com/show_bug.cgi?id=2019692
- https://github.com/openvswitch/ovs-issues/issues/226
- https://github.com/openvswitch/ovs/commit/803ed12e31b0377c37d7aa8c94b3b92f2081e349
- https://security.gentoo.org/glsa/202311-16
- https://ubuntu.com/security/CVE-2021-3905