RHSA-2021:0837: Moderate: openvswitch2.11 security update
Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.Security Fix(es): openvswitch: limitation in the OVS packet parsing in userspace leads to DoS (CVE-2020-35498) lldp/openvswitch: denial of service via externally triggered memory leak (CVE-2020-27827)For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2021:0837?
The severity of RHSA-2021:0837 is classified as moderate.
How do I fix RHSA-2021:0837?
To fix RHSA-2021:0837, you should update the affected packages to version 2.11.3-83.el8fd or later.
Which packages are affected by RHSA-2021:0837?
The affected packages for RHSA-2021:0837 include openvswitch2.11, network-scripts-openvswitch2.11, and python3-openvswitch2.11, among others.
What type of vulnerability is addressed in RHSA-2021:0837?
RHSA-2021:0837 addresses a denial of service vulnerability due to limitations in OVS packet parsing in userspace.
What should I do if I cannot update the packages related to RHSA-2021:0837?
If you cannot update the packages related to RHSA-2021:0837, consider implementing temporary mitigations such as monitoring for unusual traffic patterns.