RHSA-2021:0834: Moderate: openvswitch2.11 security update
Open vSwitch provides standard network bridging functions and support forthe OpenFlow protocol for remote per-flow control of traffic.Security Fix(es): openvswitch: limitation in the OVS packet parsing in userspace leads to DoS (CVE-2020-35498) lldp/openvswitch: denial of service via externally triggered memory leak (CVE-2020-27827) For more details about the security issue(s), including the impact, a CVSSscore, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2021:0834?
The severity of RHSA-2021:0834 is classified as moderate.
How do I fix RHSA-2021:0834?
To fix RHSA-2021:0834, update to the package versions 2.11.3-86.el7fd or later.
What type of vulnerability is addressed in RHSA-2021:0834?
RHSA-2021:0834 addresses a limitation in the OVS packet parsing in userspace that could lead to a Denial of Service (DoS).
Which packages are affected by RHSA-2021:0834?
The affected packages include openvswitch2.11, openvswitch2.11-debuginfo, openvswitch2.11-devel, openvswitch2.11-test, and python-openvswitch2.11.
What does the CVE-2020-35498 pertain to in the context of RHSA-2021:0834?
CVE-2020-35498 pertains to a vulnerability in Open vSwitch related to packet parsing that could lead to Denial of Service.