medium5.3
CVE-2023-3153
A flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit.
Impact
A flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit. This issue could allow an attacker to cause a denial of service, including on deployments with CoPP enabled and properly configured.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ovn | Open Virtual Network | before 22.03.3 from 22.03.4 before 22.09.2 from 22.09.3 before 22.12.1 from 22.12.2 before 23.03.1 from 23.03.2 before 23.06.1 |
| Redhat | Openshift Container Platform | Version 4.0 |
| Redhat | Fast Datapath | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/security/cve/CVE-2023-3153
- https://bugzilla.redhat.com/show_bug.cgi?id=2213279
- https://github.com/ovn-org/ovn/commit/9a3f7ed905e525ebdcb14541e775211cbb0203bd
- https://github.com/ovn-org/ovn/issues/198
- https://mail.openvswitch.org/pipermail/ovs-announce/2023-August/000327.html
- https://mail.openvswitch.org/pipermail/ovs-dev/2023-August/407553.html
- https://access.redhat.com/security/cve/CVE-2023-3153
- https://bugzilla.redhat.com/show_bug.cgi?id=2213279
- https://github.com/ovn-org/ovn/commit/9a3f7ed905e525ebdcb14541e775211cbb0203bd
- https://github.com/ovn-org/ovn/issues/198
- https://mail.openvswitch.org/pipermail/ovs-announce/2023-August/000327.html
- https://mail.openvswitch.org/pipermail/ovs-dev/2023-August/407553.html