CVE-2021-36980: Use After Free
First published: Tue Feb 23 2021(Updated: )
Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Openvswitch Openvswitch | >=2.11.0<=2.15.0 | |
| redhat/openvswitch2.11 | <0:2.11.3-89.el7fd | 0:2.11.3-89.el7fd |
| redhat/openvswitch2.13 | <0:2.13.0-102.el7fd | 0:2.13.0-102.el7fd |
| redhat/openvswitch2.11 | <0:2.11.3-86.el8fd | 0:2.11.3-86.el8fd |
| redhat/openvswitch2.13 | <0:2.13.0-114.el8fd | 0:2.13.0-114.el8fd |
| redhat/openvswitch2.15 | <0:2.15.0-24.el8fd | 0:2.15.0-24.el8fd |
| redhat/openvswitch2.15 | <0:2.15.0-28.el8fd | 0:2.15.0-28.el8fd |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/google/oss-fuzz-vulns/blob/main/vulns/openvswitch/OSV-2020-2197.yaml
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27851
- https://github.com/openvswitch/ovs/commit/77cccc74deede443e8b9102299efc869a52b65b2
- https://github.com/openvswitch/ovs/commit/38744b1bcb022c611712527f039722115300f58f
- https://github.com/openvswitch/ovs/commit/65c61b0c23a0d474696d7b1cea522a5016a8aeb3
- https://github.com/openvswitch/ovs/commit/6d67310f4d2524b466b98f05ebccc1add1e8cf35
- https://github.com/openvswitch/ovs/commit/8ce8dc34b5f73b30ce0c1869af9947013c3c6575
- https://github.com/openvswitch/ovs/commit/9926637a80d0d243dbf9c49761046895e9d1a8e2
- https://security.gentoo.org/glsa/202311-16
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1984477
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1984480
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1984478
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1984475
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1984476
- https://github.com/openvswitch/ovs/commit/418a7a84245f5fbe589dd1267463fc9ba27a1dd6
- https://access.redhat.com/errata/RHSA-2021:3758
- https://access.redhat.com/security/cve/cve-2021-36980
- https://access.redhat.com/errata/RHSA-2021:3942
- https://bugzilla.redhat.com/show_bug.cgi?id=1984473
- https://www.cve.org/CVERecord?id=CVE-2021-36980 https://nvd.nist.gov/vuln/detail/CVE-2021-36980 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27851
- https://access.redhat.com/errata/RHBA-2021:1166
- https://access.redhat.com/errata/RHBA-2022:8558
- https://access.redhat.com/errata/RHBA-2021:1163
- https://access.redhat.com/errata/RHBA-2021:2508
- https://access.redhat.com/errata/RHBA-2021:2509
Parent vulnerabilities
(Appears in the following advisories)
Frequently Asked Questions
What is CVE-2021-36980?
CVE-2021-36980 is a vulnerability in Open vSwitch (aka openvswitch) that allows for a use-after-free in decode_NXAST_RAW_ENCAP during the decoding of a RAW_ENCAP action.
What is the severity of CVE-2021-36980?
The severity of CVE-2021-36980 is high with a CVSS score of 7.5.
Which software versions are affected by CVE-2021-36980?
Open vSwitch versions 2.11.0 through 2.15.0 are affected by CVE-2021-36980.
How can I fix CVE-2021-36980?
To fix CVE-2021-36980, you need to update Open vSwitch to version 2.13.4 if you are using version 2.11.0 to 2.13.0, or to version 2.15.1 if you are using version 2.15.0.
Where can I find more information about CVE-2021-36980?
You can find more information about CVE-2021-36980 in the referenced links: [link1](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27851), [link2](https://github.com/openvswitch/ovs/commit/77cccc74deede443e8b9102299efc869a52b65b2), [link3](https://github.com/openvswitch/ovs/commit/65c61b0c23a0d474696d7b1cea522a5016a8aeb3).
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/mitre-cve
- collector/nvd-api
- collector/nvd-index
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2021-36980
- agent/software-canonical-lookup
- collector/redhat-cve
- vendor/openvswitch
- canonical/openvswitch openvswitch
- version/openvswitch openvswitch/2.11.0
- version/openvswitch openvswitch/2.15.0
- package-manager/redhat