Wind River Support Network

HomeDefectsLIN1019-6862
Fixed

LIN1019-6862 : Security Advisory - openvswitch - CVE-2021-36980

Created: Jul 20, 2021    Updated: Sep 16, 2021
Resolved Date: Aug 16, 2021
Found In Version: 10.19.45.1
Fix Version: 10.19.45.19
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Userspace

Description

Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.

CREATE(Triage):(User=admin) [CVE-2021-36980|https://nvd.nist.gov/vuln/detail/CVE-2021-36980]

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/openvswitch/OSV-2020-2197.yaml 	
https://github.com/openvswitch/ovs/commit/38744b1bcb022c611712527f039722115300f58f 	
https://github.com/openvswitch/ovs/commit/65c61b0c23a0d474696d7b1cea522a5016a8aeb3 	
https://github.com/openvswitch/ovs/commit/6d67310f4d2524b466b98f05ebccc1add1e8cf35 	
https://github.com/openvswitch/ovs/commit/77cccc74deede443e8b9102299efc869a52b65b2 	
https://github.com/openvswitch/ovs/commit/8ce8dc34b5f73b30ce0c1869af9947013c3c6575 	
https://github.com/openvswitch/ovs/commit/9926637a80d0d243dbf9c49761046895e9d1a8e2

CVEs


Live chat
Online