RHSA-2020:2298: Moderate: openvswitch security, bug fix and enhancement update
Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.<br>Security Fix(es):<br><li> dpdk: librtevhost Interger overflow in vhostusersetlogbase() (CVE-2020-10722)</li> <li> dpdk: librtevhost Integer truncation in vhostusercheckandallocqueuepair() (CVE-2020-10723)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> OVS causing high pings and latency inside guest VM when an active DPDK port fails (BZ#1822198)</li> <li> SEGV after recirculation in batch processing in vswitchd 2.9.0 (BZ#1826886)</li>
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:2298?
RHSA-2020:2298 is classified as a critical vulnerability due to the potential for remote code execution.
How do I fix RHSA-2020:2298?
To fix RHSA-2020:2298, you should update Open vSwitch to version 2.9.0-130.el7fd or higher.
What specific vulnerability does RHSA-2020:2298 address?
RHSA-2020:2298 addresses an integer overflow vulnerability in the vhost_user_set_log_base function.
Which packages are affected by RHSA-2020:2298?
The affected packages include openvswitch, openvswitch-debuginfo, openvswitch-devel, and others in the Open vSwitch ecosystem.
Is there a known exploit for RHSA-2020:2298?
As of now, there are no known public exploits for the vulnerabilities addressed in RHSA-2020:2298.