CVE-2021-3905: High severity Openvswitch OpenvSwitch vulnerability
A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments.
Other sources
A vulnerability was found in Openvswitch where a memory leak exists during userspace ip fragmentation processing which causes OpenvSwitch to leak packet buffers.
References: https://github.com/openvswitch/ovs-issues/issues/226
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-3905?
CVE-2021-3905 is a vulnerability in Open vSwitch (OVS) that causes a memory leak during userspace IP fragmentation processing.
What is the severity of CVE-2021-3905?
CVE-2021-3905 has a severity value of 7.5 (high).
How does CVE-2021-3905 impact Open vSwitch?
CVE-2021-3905 can potentially exhaust available memory in Open vSwitch by keeping sending packet fragments.
Which software versions are affected by CVE-2021-3905?
Openvswitch 2.17.0, Redhat Enterprise Linux Fast Datapath 7.0 and 8.0, Canonical Ubuntu Linux 21.10, and Fedoraproject Fedora 35 are affected by CVE-2021-3905.
How can CVE-2021-3905 be fixed?
To fix CVE-2021-3905, it is recommended to update to Openvswitch 2.10.7+ds1-0+deb10u1 or later, Redhat Enterprise Linux Fast Datapath 2.12 or later, or Ubuntu Openvswitch 2.16.0-0ubuntu2.1 or later.