CVE-2020-35498
Fixed in a distro release EPSS 8%CVSS 7.5
A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.
Products: openvswitch, debian_linux, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | openvswitch | 2.14.2-1 |
| Debian 10 | openvswitch | 2.10.7+ds1-0+deb10u1 |
| Debian 12 | openvswitch | 2.15.0~git20210104.def6eb1ea+dfsg1-5 |
| Debian 13 | openvswitch | 2.15.0~git20210104.def6eb1ea+dfsg1-5 |
| Debian 14 | openvswitch | 2.15.0~git20210104.def6eb1ea+dfsg1-5 |
| Debian 9 | openvswitch | 2.6.10-0+deb9u1 |
| Red Hat Enterprise Linux 7 | openvswitch | 0:2.9.9-1.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-debuginfo | 0:2.9.9-1.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-devel | 0:2.9.9-1.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-test | 0:2.9.9-1.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.11 | 0:2.11.3-86.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.11-debuginfo | 0:2.11.3-86.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.11-devel | 0:2.11.3-86.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.11-test | 0:2.11.3-86.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.13 | 0:2.13.0-81.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.13-debuginfo | 0:2.13.0-81.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.13-devel | 0:2.13.0-81.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.13-ipsec | 0:2.13.0-81.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.13-test | 0:2.13.0-81.el7fdp |
| Red Hat Enterprise Linux 7 | ovn2.11 | 0:2.11.1-57.el7fdp |
| Red Hat Enterprise Linux 7 | ovn2.11-debuginfo | 0:2.11.1-57.el7fdp |
| Red Hat Enterprise Linux 7 | ovn2.11-host | 0:2.11.1-57.el7fdp |
| Red Hat Enterprise Linux 7 | ovn2.11-vtep | 0:2.11.1-57.el7fdp |
| Red Hat Enterprise Linux 7 | python-openvswitch | 0:2.9.9-1.el7fdp |
| Red Hat Enterprise Linux 7 | python-openvswitch2.11 | 0:2.11.3-86.el7fdp |
| Red Hat Enterprise Linux 7 | python3-openvswitch2.13 | 0:2.13.0-81.el7fdp |
| Red Hat Enterprise Linux 8 | network-scripts-openvswitch2.11 | 0:2.11.3-83.el8fdp |
| Red Hat Enterprise Linux 8 | network-scripts-openvswitch2.13 | 0:2.13.0-79.5.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11 | 0:2.11.3-83.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11-debuginfo | 0:2.11.3-83.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11-debugsource | 0:2.11.3-83.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11-devel | 0:2.11.3-83.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11-test | 0:2.11.3-83.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.13 | 0:2.13.0-79.5.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.13-debuginfo | 0:2.13.0-79.5.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.13-debugsource | 0:2.13.0-79.5.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.13-devel | 0:2.13.0-79.5.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.13-ipsec | 0:2.13.0-79.5.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.13-test | 0:2.13.0-79.5.el8fdp |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.11 | 0:2.11.3-83.el8fdp |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.11-debuginfo | 0:2.11.3-83.el8fdp |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.13 | 0:2.13.0-79.5.el8fdp |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.13-debuginfo | 0:2.13.0-79.5.el8fdp |
| Red Hat openstack 13 | openvswitch2.11 | 0:2.11.3-86.el7fdp |
| Red Hat openstack 13 | openvswitch2.11-debuginfo | 0:2.11.3-86.el7fdp |
| Red Hat openstack 13 | openvswitch2.11-devel | 0:2.11.3-86.el7fdp |
| Red Hat openstack 13 | openvswitch2.11-test | 0:2.11.3-86.el7fdp |
| Red Hat openstack 13 | python-openvswitch2.11 | 0:2.11.3-86.el7fdp |
| SUSE Enterprise Storage 5 | openvswitch | 2.7.12-3.39.1 |
| SUSE Enterprise Storage 6 | openvswitch | 2.11.5-3.15.3 |
| SUSE HPE Helion OpenStack 8 | openvswitch | 2.7.12-3.39.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | openvswitch | 2.11.5-3.15.3 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | openvswitch | 2.11.5-3.15.3 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | openvswitch | 2.11.5-6.33.3 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | openvswitch | 2.11.5-6.33.3 |
| SUSE Linux Enterprise Module for Package Hub 15 SP2 | openvswitch | 2.11.5-3.15.3 |
| SUSE Linux Enterprise Module for Package Hub 15 SP2 | openvswitch | 2.13.2-9.14.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 | openvswitch | 2.13.2-9.14.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | openvswitch | 2.5.11-25.29.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | openvswitch-dpdk | 2.5.11-25.29.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | openvswitch | 2.5.11-25.29.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | openvswitch-dpdk | 2.5.11-25.29.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | openvswitch | 2.7.12-3.39.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | openvswitch | 2.7.12-3.39.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | openvswitch | 2.8.10-4.26.1 |
| SUSE Linux Enterprise Server 12 SP5 | openvswitch | 2.11.5-3.9.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | openvswitch | 2.11.5-3.15.3 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | openvswitch | 2.11.5-3.15.3 |
| SUSE Linux Enterprise Server 15-LTSS | openvswitch | 2.11.5-6.33.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | openvswitch | 2.5.11-25.29.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | openvswitch-dpdk | 2.5.11-25.29.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | openvswitch | 2.7.12-3.39.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | openvswitch | 2.8.10-4.26.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | openvswitch | 2.11.5-3.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | openvswitch | 2.11.5-6.33.3 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | openvswitch | 2.11.5-3.15.3 |
| SUSE Manager Proxy 4.0 | openvswitch | 2.11.5-3.15.3 |
| SUSE Manager Retail Branch Server 4.0 | openvswitch | 2.11.5-3.15.3 |
| SUSE Manager Server 4.0 | openvswitch | 2.11.5-3.15.3 |
| SUSE OpenStack Cloud 7 | openvswitch | 2.5.11-25.29.1 |
| SUSE OpenStack Cloud 7 | openvswitch-dpdk | 2.5.11-25.29.1 |
| SUSE OpenStack Cloud 8 | openvswitch | 2.7.12-3.39.1 |
| SUSE OpenStack Cloud 9 | openvswitch | 2.8.10-4.26.1 |
| SUSE OpenStack Cloud Crowbar 8 | openvswitch | 2.7.12-3.39.1 |
| SUSE OpenStack Cloud Crowbar 9 | openvswitch | 2.8.10-4.26.1 |
| Ubuntu 16.04 LTS | openvswitch | 2.5.9-0ubuntu0.16.04.3 |
| Ubuntu 18.04 LTS | openvswitch | 2.9.8-0ubuntu0.18.04.2 |
| Ubuntu 20.04 LTS | openvswitch | 2.13.1-0ubuntu0.20.04.4 |
| openSUSE Leap 15.2 | openvswitch | 2.13.2-lp152.3.12.1 |