CVE-2020-35498: High severity open vswitch vulnerability
A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.
Other sources
Due to a limitation in the OVS packet parsing in userspace, the resulting megaflow in the kernel is too wide which can potentially cause a DoS.
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the vulnerability ID for this openvswitch vulnerability?
The vulnerability ID for this openvswitch vulnerability is CVE-2020-35498.
What is the severity of CVE-2020-35498?
The severity of CVE-2020-35498 is high (7.5).
What is the affected software for CVE-2020-35498?
The affected software for CVE-2020-35498 is openvswitch.
How can a malicious user exploit CVE-2020-35498?
A malicious user can exploit CVE-2020-35498 by sending a specially crafted packet to the openvswitch, causing a denial of service.
Is there a remedy for CVE-2020-35498?
Yes, there is a remedy for CVE-2020-35498. The recommended remedy is to update openvswitch to version 2.5.12 or higher.