CVE-2023-5366
Fixed in a distro release EPSS <1%CVSS 7.1
A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses.
Products: Red Hat Fast Datapath for RHEL 7, Red Hat Fast Datapath for RHEL 8, Red Hat Fast Datapath for RHEL 9, Red Hat Enterprise Linux 7, Red Hat OpenShift Container Platform 3.11, Red Hat OpenShift Container Platform 4, Red Hat OpenStack Platform 16.1, Red Hat OpenStack Platform 16.2, Red Hat Virtualization 4, Fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | openvswitch | 2.10.7+ds1-0+deb10u5 |
| Debian 11 | openvswitch | 2.15.0+ds1-2+deb11u5 |
| Debian 12 | openvswitch | 3.1.0-2+deb12u1 |
| Debian 13 | openvswitch | 3.1.2-1 |
| Debian 14 | openvswitch | 3.1.2-1 |
| Red Hat Enterprise Linux 8 | network-scripts-openvswitch2.17 | 0:2.17.0-148.el8fdp |
| Red Hat Enterprise Linux 8 | network-scripts-openvswitch3.1 | 0:3.1.0-96.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.17 | 0:2.17.0-148.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.17-debuginfo | 0:2.17.0-148.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.17-debugsource | 0:2.17.0-148.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.17-devel | 0:2.17.0-148.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.17-ipsec | 0:2.17.0-148.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.17-test | 0:2.17.0-148.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch3.1 | 0:3.1.0-96.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch3.1-debuginfo | 0:3.1.0-96.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch3.1-debugsource | 0:3.1.0-96.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch3.1-devel | 0:3.1.0-96.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch3.1-ipsec | 0:3.1.0-96.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch3.1-test | 0:3.1.0-96.el8fdp |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.17 | 0:2.17.0-148.el8fdp |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.17-debuginfo | 0:2.17.0-148.el8fdp |
| Red Hat Enterprise Linux 8 | python3-openvswitch3.1 | 0:3.1.0-96.el8fdp |
| Red Hat Enterprise Linux 8 | python3-openvswitch3.1-debuginfo | 0:3.1.0-96.el8fdp |
| Red Hat Enterprise Linux 9 | openvswitch2.17 | 0:2.17.0-131.el9fdp |
| Red Hat Enterprise Linux 9 | openvswitch2.17-debuginfo | 0:2.17.0-131.el9fdp |
| Red Hat Enterprise Linux 9 | openvswitch2.17-debugsource | 0:2.17.0-131.el9fdp |
| Red Hat Enterprise Linux 9 | openvswitch2.17-devel | 0:2.17.0-131.el9fdp |
| Red Hat Enterprise Linux 9 | openvswitch2.17-ipsec | 0:2.17.0-131.el9fdp |
| Red Hat Enterprise Linux 9 | openvswitch2.17-test | 0:2.17.0-131.el9fdp |
| Red Hat Enterprise Linux 9 | openvswitch3.1 | 0:3.1.0-88.el9fdp |
| Red Hat Enterprise Linux 9 | openvswitch3.1-debuginfo | 0:3.1.0-88.el9fdp |
| Red Hat Enterprise Linux 9 | openvswitch3.1-debugsource | 0:3.1.0-88.el9fdp |
| Red Hat Enterprise Linux 9 | openvswitch3.1-devel | 0:3.1.0-88.el9fdp |
| Red Hat Enterprise Linux 9 | openvswitch3.1-ipsec | 0:3.1.0-88.el9fdp |
| Red Hat Enterprise Linux 9 | openvswitch3.1-test | 0:3.1.0-88.el9fdp |
| Red Hat Enterprise Linux 9 | openvswitch3.2 | 0:3.2.0-56.el9fdp |
| Red Hat Enterprise Linux 9 | openvswitch3.2-debuginfo | 0:3.2.0-56.el9fdp |
| Red Hat Enterprise Linux 9 | openvswitch3.2-debugsource | 0:3.2.0-56.el9fdp |
| Red Hat Enterprise Linux 9 | openvswitch3.2-devel | 0:3.2.0-56.el9fdp |
| Red Hat Enterprise Linux 9 | openvswitch3.2-ipsec | 0:3.2.0-56.el9fdp |
| Red Hat Enterprise Linux 9 | openvswitch3.2-test | 0:3.2.0-56.el9fdp |
| Red Hat Enterprise Linux 9 | python3-openvswitch2.17 | 0:2.17.0-131.el9fdp |
| Red Hat Enterprise Linux 9 | python3-openvswitch2.17-debuginfo | 0:2.17.0-131.el9fdp |
| Red Hat Enterprise Linux 9 | python3-openvswitch3.1 | 0:3.1.0-88.el9fdp |
| Red Hat Enterprise Linux 9 | python3-openvswitch3.1-debuginfo | 0:3.1.0-88.el9fdp |
| Red Hat Enterprise Linux 9 | python3-openvswitch3.2 | 0:3.2.0-56.el9fdp |
| Red Hat Enterprise Linux 9 | python3-openvswitch3.2-debuginfo | 0:3.2.0-56.el9fdp |
| SUSE Enterprise Storage 7.1 | openvswitch | 2.14.2-150300.19.11.1 |
| SUSE Enterprise Storage 7.1 | openvswitch | 2.14.2-150300.19.14.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | openvswitch | 2.13.2-150200.9.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | openvswitch | 2.13.2-150200.9.28.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | openvswitch | 2.14.2-150300.19.11.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | openvswitch | 2.14.2-150300.19.14.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | openvswitch | 2.14.2-150300.19.11.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | openvswitch | 2.14.2-150300.19.14.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | openvswitch3 | 3.1.7-150500.3.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | openvswitch3 | 3.1.7-150500.3.25.1 |
| SUSE Linux Enterprise Micro 5.5 | openvswitch3 | 3.1.7-150500.3.25.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP5 | openvswitch | 2.14.2-150400.24.17.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP5 | openvswitch | 2.14.2-150400.24.14.2 |
| SUSE Linux Enterprise Module for Package Hub 15 SP4 | openvswitch | 2.14.2-150400.24.14.2 |
| SUSE Linux Enterprise Module for Package Hub 15 SP4 | openvswitch | 2.14.2-150400.24.17.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | openvswitch | 2.14.2-150400.24.17.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | openvswitch | 2.14.2-150400.24.14.2 |
| SUSE Linux Enterprise Module for Server Applications 15 SP4 | openvswitch | 2.14.2-150400.24.17.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP4 | openvswitch | 2.14.2-150400.24.14.2 |
| SUSE Linux Enterprise Module for Server Applications 15 SP5 | openvswitch3 | 3.1.0-150500.3.11.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | openvswitch | 2.13.2-150200.9.28.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | openvswitch | 2.13.2-150200.9.25.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | openvswitch | 2.14.2-150300.19.11.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | openvswitch | 2.14.2-150300.19.14.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | openvswitch3 | 3.1.7-150500.3.25.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | openvswitch | 3.1.7-150600.33.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | openvswitch | 2.13.2-150200.9.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | openvswitch | 2.13.2-150200.9.28.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | openvswitch | 2.14.2-150300.19.11.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | openvswitch | 2.14.2-150300.19.14.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | openvswitch3 | 3.1.7-150500.3.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | openvswitch | 3.1.7-150600.33.9.1 |
| SUSE Linux Micro 6.0 | openvswitch | 3.1.7-4.1 |
| SUSE Linux Micro 6.1 | openvswitch | 3.1.7-slfo.1.1_2.1 |
| Ubuntu 20.04 LTS | openvswitch | 2.13.8-0ubuntu1.3 |
| Ubuntu 20.04 LTS | openvswitch | 2.13.8-0ubuntu1.4 |
| Ubuntu 22.04 LTS | openvswitch | 2.17.9-0ubuntu0.22.04.1 |
| Ubuntu Pro 16.04 LTS | openvswitch | no fix |
| Ubuntu Pro 18.04 LTS | openvswitch | 2.9.8-0ubuntu0.18.04.5+esm1 |
| Ubuntu Pro 18.04 LTS | openvswitch | no fix |
| openSUSE Leap 15.4 | openvswitch | 2.14.2-150400.24.17.1 |
| openSUSE Leap 15.4 | openvswitch | 2.13.2-150200.9.25.1 |
| openSUSE Leap 15.4 | openvswitch | 2.14.2-150400.24.14.2 |
| openSUSE Leap 15.4 | openvswitch | 2.13.2-150200.9.28.1 |
| openSUSE Leap 15.5 | openvswitch | 2.14.2-150400.24.14.2 |
| openSUSE Leap 15.5 | openvswitch | 2.14.2-150400.24.17.1 |
| openSUSE Leap 15.5 | openvswitch3 | 3.1.0-150500.3.11.1 |
| openSUSE Leap 15.6 | openvswitch | 3.1.7-150600.33.9.1 |
| openSUSE Leap 15.6 | openvswitch3 | 3.1.7-150500.3.25.1 |
| openSUSE Tumbleweed | openvswitch | 3.1.0-18.1 |