Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-3905

A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments.

Published

2022-08-23T16:15:10.177

Last Modified

2024-11-21T06:22:44.723

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses

Type: Secondary
CWE-401
Type: Primary
CWE-401

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	openvswitch	openvswitch	< 2.17.0	Yes
Application	redhat	enterprise_linux_fast_datapath	7.0	Yes
Application	redhat	enterprise_linux_fast_datapath	8.0	Yes
Operating System	canonical	ubuntu_linux	21.10	Yes
Operating System	fedoraproject	fedora	35	Yes

References

https://access.redhat.com/security/cve/CVE-2021-3905 Third Party Advisory ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=2019692 Issue Tracking, Patch, Third Party Advisory ([email protected])
https://github.com/openvswitch/ovs-issues/issues/226 Exploit, Issue Tracking, Patch, Third Party Advisory ([email protected])
https://github.com/openvswitch/ovs/commit/803ed12e31b0377c37d7aa8c94b3b92f2081e349 Patch, Third Party Advisory ([email protected])
https://security.gentoo.org/glsa/202311-16 ([email protected])
https://ubuntu.com/security/CVE-2021-3905 Patch, Third Party Advisory ([email protected])
https://access.redhat.com/security/cve/CVE-2021-3905 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=2019692 Issue Tracking, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/openvswitch/ovs-issues/issues/226 Exploit, Issue Tracking, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/openvswitch/ovs/commit/803ed12e31b0377c37d7aa8c94b3b92f2081e349 Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.gentoo.org/glsa/202311-16 (af854a3a-2127-422b-91ae-364da2661108)
https://ubuntu.com/security/CVE-2021-3905 Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)