CVE-2020-27827
Fixed in a distro release EPSS 3%CVSS 7.5
A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.
Products: lldpd_project lldpd, openvswitch, redhat openshift_container_platform, redhat openstack, redhat virtualization, redhat enterprise_linux, fedoraproject fedora, siemens simatic_hmi_unified_comfort_panels_firmware, siemens simatic_net_cp_1243-1_firmware, siemens simatic_net_cp_1243-8_irc_firmware, siemens simatic_net_cp_1542sp-1_firmware, siemens simatic_net_cp_1542sp-1_irc_firmware, siemens simatic_net_cp_1543-1_firmware, siemens simatic_net_cp_1543sp-1_firmware, siemens simatic_net_cp_1545-1_firmware, siemens tim_1531_irc_firmware, siemens sinumerik_one_firmware
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 9 | lldpd | 1.0.18-4.el9 |
| AlmaLinux 9 | lldpd-devel | 1.0.18-4.el9 |
| Arch Linux | lldpd | 1.0.8-1 |
| Arch Linux | openvswitch | 2.14.1-1 |
| Debian 10 | lldpd | 1.0.3-1+deb10u1 |
| Debian 10 | openvswitch | 2.10.6+ds1-0+deb10u1 |
| Debian 12 | lldpd | 1.0.8-1 |
| Debian 12 | openvswitch | 2.15.0~git20210104.def6eb1ea+dfsg1-4 |
| Debian 13 | lldpd | 1.0.8-1 |
| Debian 13 | openvswitch | 2.15.0~git20210104.def6eb1ea+dfsg1-4 |
| Debian 14 | lldpd | 1.0.8-1 |
| Debian 14 | openvswitch | 2.15.0~git20210104.def6eb1ea+dfsg1-4 |
| Debian 9 | openvswitch | 2.6.10-0+deb9u1 |
| Red Hat Enterprise Linux 7 | openvswitch | 0:2.9.9-1.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-debuginfo | 0:2.9.9-1.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-devel | 0:2.9.9-1.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-test | 0:2.9.9-1.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.11 | 0:2.11.3-86.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.11-debuginfo | 0:2.11.3-86.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.11-devel | 0:2.11.3-86.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.11-test | 0:2.11.3-86.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.13 | 0:2.13.0-81.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.13-debuginfo | 0:2.13.0-81.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.13-devel | 0:2.13.0-81.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.13-ipsec | 0:2.13.0-81.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.13-test | 0:2.13.0-81.el7fdp |
| Red Hat Enterprise Linux 7 | ovn2.11 | 0:2.11.1-57.el7fdp |
| Red Hat Enterprise Linux 7 | ovn2.11-debuginfo | 0:2.11.1-57.el7fdp |
| Red Hat Enterprise Linux 7 | ovn2.11-host | 0:2.11.1-57.el7fdp |
| Red Hat Enterprise Linux 7 | ovn2.11-vtep | 0:2.11.1-57.el7fdp |
| Red Hat Enterprise Linux 7 | python-openvswitch | 0:2.9.9-1.el7fdp |
| Red Hat Enterprise Linux 7 | python-openvswitch2.11 | 0:2.11.3-86.el7fdp |
| Red Hat Enterprise Linux 7 | python3-openvswitch2.13 | 0:2.13.0-81.el7fdp |
| Red Hat Enterprise Linux 7 | redhat-virtualization-host | 0:4.3.14-20210322.0.el7_9 |
| Red Hat Enterprise Linux 7 | redhat-virtualization-host-image-update | 0:4.3.14-20210322.0.el7_9 |
| Red Hat Enterprise Linux 8 | network-scripts-openvswitch2.11 | 0:2.11.3-83.el8fdp |
| Red Hat Enterprise Linux 8 | network-scripts-openvswitch2.13 | 0:2.13.0-79.5.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11 | 0:2.11.3-83.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11-debuginfo | 0:2.11.3-83.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11-debugsource | 0:2.11.3-83.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11-devel | 0:2.11.3-83.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11-test | 0:2.11.3-83.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.13 | 0:2.13.0-79.5.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.13-debuginfo | 0:2.13.0-79.5.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.13-debugsource | 0:2.13.0-79.5.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.13-devel | 0:2.13.0-79.5.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.13-ipsec | 0:2.13.0-79.5.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.13-test | 0:2.13.0-79.5.el8fdp |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.11 | 0:2.11.3-83.el8fdp |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.11-debuginfo | 0:2.11.3-83.el8fdp |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.13 | 0:2.13.0-79.5.el8fdp |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.13-debuginfo | 0:2.13.0-79.5.el8fdp |
| Red Hat Enterprise Linux 9 | lldpd | 0:1.0.18-4.el9 |
| Red Hat Enterprise Linux 9 | lldpd-debuginfo | 0:1.0.18-4.el9 |
| Red Hat Enterprise Linux 9 | lldpd-debugsource | 0:1.0.18-4.el9 |
| Red Hat Enterprise Linux 9 | lldpd-devel | 0:1.0.18-4.el9 |
| Red Hat openstack 13 | openvswitch2.11 | 0:2.11.3-86.el7fdp |
| Red Hat openstack 13 | openvswitch2.11-debuginfo | 0:2.11.3-86.el7fdp |
| Red Hat openstack 13 | openvswitch2.11-devel | 0:2.11.3-86.el7fdp |
| Red Hat openstack 13 | openvswitch2.11-test | 0:2.11.3-86.el7fdp |
| Red Hat openstack 13 | python-openvswitch2.11 | 0:2.11.3-86.el7fdp |
| Red Hat rhev hypervisor 4.4 | redhat-virtualization-host | 0:4.4.4-20210307.0.el8_3 |
| Red Hat rhev hypervisor 4.4 | redhat-virtualization-host-image-update | 0:4.4.4-20210307.0.el8_3 |
| Rocky Linux 9 | lldpd | 0:1.0.18-4.el9 |
| SUSE Enterprise Storage 5 | openvswitch | 2.7.12-3.36.1 |
| SUSE Enterprise Storage 6 | openvswitch | 2.11.5-3.12.1 |
| SUSE HPE Helion OpenStack 8 | openvswitch | 2.7.12-3.36.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | openvswitch | 2.11.5-3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | openvswitch | 2.11.5-3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | openvswitch | 2.11.5-6.30.2 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | openvswitch | 2.11.5-6.30.2 |
| SUSE Linux Enterprise Module for Package Hub 15 SP2 | openvswitch | 2.11.5-3.12.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP2 | openvswitch | 2.13.2-9.11.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 | openvswitch | 2.13.2-9.11.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | openvswitch | 2.5.11-25.26.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | openvswitch-dpdk | 2.5.11-25.26.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | openvswitch | 2.5.11-25.26.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | openvswitch-dpdk | 2.5.11-25.26.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | openvswitch | 2.7.12-3.36.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | openvswitch | 2.7.12-3.36.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | openvswitch | 2.8.10-4.23.1 |
| SUSE Linux Enterprise Server 12 SP5 | openvswitch | 2.11.5-3.3.2 |
| SUSE Linux Enterprise Server 15 SP1-BCL | openvswitch | 2.11.5-3.12.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | openvswitch | 2.11.5-3.12.1 |
| SUSE Linux Enterprise Server 15-LTSS | openvswitch | 2.11.5-6.30.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | openvswitch | 2.5.11-25.26.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | openvswitch-dpdk | 2.5.11-25.26.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | openvswitch | 2.7.12-3.36.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | openvswitch | 2.8.10-4.23.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | openvswitch | 2.11.5-3.3.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 | openvswitch | 2.11.5-6.30.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | openvswitch | 2.11.5-3.12.1 |
| SUSE Manager Proxy 4.0 | openvswitch | 2.11.5-3.12.1 |
| SUSE Manager Retail Branch Server 4.0 | openvswitch | 2.11.5-3.12.1 |
| SUSE Manager Server 4.0 | openvswitch | 2.11.5-3.12.1 |
| SUSE OpenStack Cloud 7 | openvswitch | 2.5.11-25.26.1 |
| SUSE OpenStack Cloud 7 | openvswitch-dpdk | 2.5.11-25.26.1 |
| SUSE OpenStack Cloud 8 | openvswitch | 2.7.12-3.36.1 |
| SUSE OpenStack Cloud 9 | openvswitch | 2.8.10-4.23.1 |
| SUSE OpenStack Cloud Crowbar 8 | openvswitch | 2.7.12-3.36.1 |
| SUSE OpenStack Cloud Crowbar 9 | openvswitch | 2.8.10-4.23.1 |
| Ubuntu 16.04 LTS | lldpd | no fix |
| Ubuntu 16.04 LTS | openvswitch | 2.5.9-0ubuntu0.16.04.2 |
| Ubuntu 18.04 LTS | lldpd | no fix |
| Ubuntu 18.04 LTS | openvswitch | 2.9.7-0ubuntu0.18.04.2 |
| Ubuntu 20.04 LTS | lldpd | no fix |
| Ubuntu 20.04 LTS | openvswitch | 2.13.1-0ubuntu0.20.04.3 |
| Ubuntu 22.04 LTS | lldpd | no fix |
| Ubuntu 24.04 LTS | lldpd | no fix |
| Ubuntu 25.10 | lldpd | no fix |
| Ubuntu 26.04 LTS | lldpd | no fix |
| Ubuntu 26.10 | lldpd | no fix |
| openSUSE Leap 15.2 | openvswitch | 2.13.2-lp152.3.9.1 |
| openSUSE Tumbleweed | openvswitch | 2.14.2-11.3 |