CVE-2021-36980
Fixed in a distro release EPSS 1%CVSS 5.5
Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.
Products: openvswitch
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | openvswitch | 2.15.1-1 |
| Debian 12 | openvswitch | 2.15.0+ds1-10 |
| Debian 13 | openvswitch | 2.15.0+ds1-10 |
| Debian 14 | openvswitch | 2.15.0+ds1-10 |
| Red Hat Enterprise Linux 7 | openvswitch2.11 | 0:2.11.3-89.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.11-debuginfo | 0:2.11.3-89.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.11-devel | 0:2.11.3-89.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.11-test | 0:2.11.3-89.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.13 | 0:2.13.0-102.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.13-debuginfo | 0:2.13.0-102.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.13-devel | 0:2.13.0-102.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.13-ipsec | 0:2.13.0-102.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.13-test | 0:2.13.0-102.el7fdp |
| Red Hat Enterprise Linux 7 | python-openvswitch2.11 | 0:2.11.3-89.el7fdp |
| Red Hat Enterprise Linux 7 | python3-openvswitch2.13 | 0:2.13.0-102.el7fdp |
| Red Hat Enterprise Linux 8 | network-scripts-openvswitch2.11 | 0:2.11.3-86.el8fdp |
| Red Hat Enterprise Linux 8 | network-scripts-openvswitch2.13 | 0:2.13.0-114.el8fdp |
| Red Hat Enterprise Linux 8 | network-scripts-openvswitch2.15 | 0:2.15.0-24.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11 | 0:2.11.3-86.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11-debuginfo | 0:2.11.3-86.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11-debugsource | 0:2.11.3-86.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11-devel | 0:2.11.3-86.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11-test | 0:2.11.3-86.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.13 | 0:2.13.0-114.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.13-debuginfo | 0:2.13.0-114.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.13-debugsource | 0:2.13.0-114.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.13-devel | 0:2.13.0-114.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.13-ipsec | 0:2.13.0-114.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.13-test | 0:2.13.0-114.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.15 | 0:2.15.0-24.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.15-debuginfo | 0:2.15.0-24.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.15-debugsource | 0:2.15.0-24.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.15-devel | 0:2.15.0-24.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.15-ipsec | 0:2.15.0-24.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.15-test | 0:2.15.0-24.el8fdp |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.11 | 0:2.11.3-86.el8fdp |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.11-debuginfo | 0:2.11.3-86.el8fdp |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.13 | 0:2.13.0-114.el8fdp |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.13-debuginfo | 0:2.13.0-114.el8fdp |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.15 | 0:2.15.0-24.el8fdp |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.15-debuginfo | 0:2.15.0-24.el8fdp |
| Red Hat openshift 4.9 | coreos-installer | 0:0.10.0-2.rhaos4.9.el8 |
| Red Hat openshift 4.9 | coreos-installer-bootinfra | 0:0.10.0-2.rhaos4.9.el8 |
| Red Hat openshift 4.9 | coreos-installer-bootinfra-debuginfo | 0:0.10.0-2.rhaos4.9.el8 |
| Red Hat openshift 4.9 | coreos-installer-debuginfo | 0:0.10.0-2.rhaos4.9.el8 |
| Red Hat openshift 4.9 | coreos-installer-debugsource | 0:0.10.0-2.rhaos4.9.el8 |
| Red Hat openshift 4.9 | jenkins | 0:2.289.3.1630554997-1.el8 |
| Red Hat openshift 4.9 | network-scripts-openvswitch2.15 | 0:2.15.0-28.el8fdp |
| Red Hat openshift 4.9 | openshift | 0:4.9.0-202110080828.p0.git.894a78b.assembly.stream.el8 |
| Red Hat openshift 4.9 | openshift | 0:4.9.0-202110080828.p0.git.894a78b.assembly.stream.el7 |
| Red Hat openshift 4.9 | openshift-hyperkube | 0:4.9.0-202110080828.p0.git.894a78b.assembly.stream.el7 |
| Red Hat openshift 4.9 | openshift-hyperkube | 0:4.9.0-202110080828.p0.git.894a78b.assembly.stream.el8 |
| Red Hat openshift 4.9 | openvswitch2.15 | 0:2.15.0-28.el8fdp |
| Red Hat openshift 4.9 | openvswitch2.15-debuginfo | 0:2.15.0-28.el8fdp |
| Red Hat openshift 4.9 | openvswitch2.15-debugsource | 0:2.15.0-28.el8fdp |
| Red Hat openshift 4.9 | openvswitch2.15-devel | 0:2.15.0-28.el8fdp |
| Red Hat openshift 4.9 | openvswitch2.15-ipsec | 0:2.15.0-28.el8fdp |
| Red Hat openshift 4.9 | openvswitch2.15-test | 0:2.15.0-28.el8fdp |
| Red Hat openshift 4.9 | python3-openvswitch2.15 | 0:2.15.0-28.el8fdp |
| Red Hat openshift 4.9 | python3-openvswitch2.15-debuginfo | 0:2.15.0-28.el8fdp |
| SUSE Linux Enterprise Module for Package Hub 15 SP3 | openvswitch | 2.14.2-150300.19.3.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP4 | dpdk | 18.11.9-150100.4.23.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP4 | openvswitch | 2.11.5-150100.3.18.2 |
| SUSE Linux Enterprise Module for Package Hub 15 SP4 | openvswitch | 2.14.2-150400.24.3.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP3 | openvswitch | 2.14.2-150300.19.3.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP4 | openvswitch | 2.14.2-150400.24.3.1 |
| SUSE Linux Enterprise Server 12 SP4-ESPOS | openvswitch | 2.8.10-4.33.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | openvswitch | 2.8.10-4.33.1 |
| SUSE Linux Enterprise Server 12 SP5 | openvswitch | 2.11.5-3.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | openvswitch | 2.8.10-4.33.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | openvswitch | 2.11.5-3.6.1 |
| SUSE OpenStack Cloud 9 | openvswitch | 2.8.10-4.33.1 |
| SUSE OpenStack Cloud Crowbar 9 | openvswitch | 2.8.10-4.33.1 |
| Ubuntu 20.04 LTS | openvswitch | 2.13.3-0ubuntu0.20.04.2 |
| openSUSE Leap 15.3 | openvswitch | 2.14.2-150300.19.3.1 |
| openSUSE Leap 15.3 | openvswitch | 2.13.2-150200.9.17.1 |
| openSUSE Leap 15.4 | dpdk | 18.11.9-150100.4.23.1 |
| openSUSE Leap 15.4 | openvswitch | 2.13.2-150200.9.17.1 |
| openSUSE Leap 15.4 | openvswitch | 2.14.2-150400.24.3.1 |
| openSUSE Leap 15.4 | openvswitch | 2.11.5-150100.3.18.2 |
| openSUSE Tumbleweed | openvswitch | 2.17.0-12.1 |