Openvswitch don't match packets on nd_target field
CVE-2023-5366

5.5MEDIUM

Key Information:

Vendor: Red Hat
Status: Openvswitch; Fast Datapath For Rhel 7; Fast Datapath For Rhel 8; Fast Datapath For Rhel 9
Vendor: CVE Published:; 6 October 2023

Summary

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses.

References

https://access.redhat.com/security/cve/CVE-2023-5366

vdb-entryx_refsource_REDHAT

https://bugzilla.redhat.com/show_bug.cgi?id=2006347

issue-trackingx_refsource_REDHAT

http://www.openwall.com/lists/oss-security/2024/02/08/4

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

High

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Oct 6, 2023
Vulnerability Reserved
Oct 3, 2023

Collectors

NVD DatabaseMitre Database

Credit

This issue was discovered by Alex Katz (Red Hat) and Slawomir Kaplonski (Red Hat).