What is the severity of CVE-2025-0650?

CVE-2025-0650 has been classified as a potentially high severity vulnerability due to its ability to bypass egress access control lists.

How do I fix CVE-2025-0650?

To mitigate CVE-2025-0650, ensure that your OVN installation is upgraded to a version newer than 24.09.2 or patched accordingly.

What types of systems are affected by CVE-2025-0650?

CVE-2025-0650 affects Open Virtual Network installations with logical switches that have DNS records and configured egress ACLs.

What are the potential risks of CVE-2025-0650?

The potential risks of CVE-2025-0650 include unauthorized access to restricted network segments and potential data exfiltration.

Is there a public record of CVE-2025-0650?

Yes, CVE-2025-0650 has public documentation detailing its effects and mitigation strategies available through security advisories.

Vulnerability/
CVE-2025-0650

high

8.1

CWE

284

22/1/2025

23/1/2025

6/2/2025

CVE-2025-0650: Ovn: egress acls may be bypassed via specially crafted udp packet

First published: Wed Jan 22 2025(Updated: )

A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.

Credit: secalert@redhat.com

Affected Software	Affected Version	How to fix
Open Virtual Network	>=22.03.8<=24.09.2

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2025-0650?
CVE-2025-0650 has been classified as a potentially high severity vulnerability due to its ability to bypass egress access control lists.
How do I fix CVE-2025-0650?
To mitigate CVE-2025-0650, ensure that your OVN installation is upgraded to a version newer than 24.09.2 or patched accordingly.
What types of systems are affected by CVE-2025-0650?
CVE-2025-0650 affects Open Virtual Network installations with logical switches that have DNS records and configured egress ACLs.
What are the potential risks of CVE-2025-0650?
The potential risks of CVE-2025-0650 include unauthorized access to restricted network segments and potential data exfiltration.
Is there a public record of CVE-2025-0650?
Yes, CVE-2025-0650 has public documentation detailing its effects and mitigation strategies available through security advisories.

agent/title
agent/weakness
agent/type
agent/description
agent/first-publish-date
agent/severity
agent/author
agent/source
agent/event
agent/trending
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/references
agent/tags
collector/nvd-api
source/NVD
agent/last-modified-date
collector/redhat-bugzilla
source/Red Hat
alias/CVE-2025-0650
agent/guess-ai
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/ovn
canonical/open virtual network

Frequently Asked Questions

What is the severity of CVE-2025-0650?
CVE-2025-0650 has been classified as a potentially high severity vulnerability due to its ability to bypass egress access control lists.
How do I fix CVE-2025-0650?
To mitigate CVE-2025-0650, ensure that your OVN installation is upgraded to a version newer than 24.09.2 or patched accordingly.
What types of systems are affected by CVE-2025-0650?
CVE-2025-0650 affects Open Virtual Network installations with logical switches that have DNS records and configured egress ACLs.
What are the potential risks of CVE-2025-0650?
The potential risks of CVE-2025-0650 include unauthorized access to restricted network segments and potential data exfiltration.
Is there a public record of CVE-2025-0650?
Yes, CVE-2025-0650 has public documentation detailing its effects and mitigation strategies available through security advisories.

CVE-2025-0650: Ovn: egress acls may be bypassed via specially crafted udp packet

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2025-0650?

How do I fix CVE-2025-0650?

What types of systems are affected by CVE-2025-0650?

What are the potential risks of CVE-2025-0650?

Is there a public record of CVE-2025-0650?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2025-0650?

How do I fix CVE-2025-0650?

What types of systems are affected by CVE-2025-0650?

What are the potential risks of CVE-2025-0650?

Is there a public record of CVE-2025-0650?