CVE-2020-27827

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Link	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=1921438	Issue Tracking Mitigation
https://mail.openvswitch.org/pipermail/ovs-dev/2021-January/379471.html	Mailing List Mitigation
https://cert-portal.siemens.com/productcert/pdf/ssa-941426.pdf	Patch Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-194-07	Third Party Advisory US Government Resource

Configuration 1

cpe:2.3:a:lldpd_project:lldpd:*:*:*:*:*:*:*:* cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:* cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:* cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:* cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:* cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:* cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:* cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:* cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:* cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

---

Published : 2021-03-18 05:15

Updated : 2022-10-07 02:53

---

NVD link : CVE-2020-27827

Mitre link : CVE-2020-27827

Redhat

Virtualization

CWE-400