Wind River Support Network

HomeDefectsLINCD-6099
Fixed

LINCD-6099 : Security Advisory - openvswitch - CVE-2021-36980

Created: Jul 20, 2021    Updated: Sep 13, 2022
Resolved Date: Oct 25, 2021
Found In Version: 10.20.6.0
Fix Version: 10.21.45.0
Severity: Standard
Applicable for: Wind River Linux CD
Component/s: Userspace

Description

Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.

CREATE(Triage):(User=admin) CVE-2021-36980 (https://nvd.nist.gov/vuln/detail/CVE-2021-36980)

CVEs


Live chat
Online