USN-7396-1: OVN vulnerability
Published Mar 31, 2025
·Updated
Marius Berntsberg, Trygve Vea, Tore Anderson, Rodolfo Alonso, Jay Faulkner, and Brian Haley discovered that OVN incorrectly handled certain crafted UDP packets. A remote attacker could possibly use this issue to bypass egress ACL rules.
Affected Software
40 affected componentsFixes available
All of the following
ubuntu/ovn-central<24.09.0-1ubuntu0.1
24.09.0-1ubuntu0.1
Ubuntu Ubuntu=24.10
All of the following
ubuntu/ovn-common<24.09.0-1ubuntu0.1
24.09.0-1ubuntu0.1
Ubuntu Ubuntu=24.10
All of the following
ubuntu/ovn-docker<24.09.0-1ubuntu0.1
24.09.0-1ubuntu0.1
Ubuntu Ubuntu=24.10
All of the following
ubuntu/ovn-host<24.09.0-1ubuntu0.1
24.09.0-1ubuntu0.1
Ubuntu Ubuntu=24.10
All of the following
ubuntu/ovn-ic<24.09.0-1ubuntu0.1
24.09.0-1ubuntu0.1
Ubuntu Ubuntu=24.10
All of the following
ubuntu/ovn-central<24.03.2-0ubuntu0.24.04.2
24.03.2-0ubuntu0.24.04.2
Ubuntu Ubuntu=24.04
All of the following
ubuntu/ovn-common<24.03.2-0ubuntu0.24.04.2
24.03.2-0ubuntu0.24.04.2
Ubuntu Ubuntu=24.04
All of the following
ubuntu/ovn-docker<24.03.2-0ubuntu0.24.04.2
24.03.2-0ubuntu0.24.04.2
Ubuntu Ubuntu=24.04
All of the following
ubuntu/ovn-host<24.03.2-0ubuntu0.24.04.2
24.03.2-0ubuntu0.24.04.2
Ubuntu Ubuntu=24.04
All of the following
ubuntu/ovn-ic<24.03.2-0ubuntu0.24.04.2
24.03.2-0ubuntu0.24.04.2
Ubuntu Ubuntu=24.04
All of the following
ubuntu/ovn-central<22.03.3-0ubuntu0.22.04.5
22.03.3-0ubuntu0.22.04.5
Ubuntu Ubuntu=22.04
All of the following
ubuntu/ovn-common<22.03.3-0ubuntu0.22.04.5
22.03.3-0ubuntu0.22.04.5
Ubuntu Ubuntu=22.04
All of the following
ubuntu/ovn-docker<22.03.3-0ubuntu0.22.04.5
22.03.3-0ubuntu0.22.04.5
Ubuntu Ubuntu=22.04
All of the following
ubuntu/ovn-host<22.03.3-0ubuntu0.22.04.5
22.03.3-0ubuntu0.22.04.5
Ubuntu Ubuntu=22.04
All of the following
ubuntu/ovn-ic<22.03.3-0ubuntu0.22.04.5
22.03.3-0ubuntu0.22.04.5
Ubuntu Ubuntu=22.04
All of the following
ubuntu/ovn-central<20.03.2-0ubuntu0.20.04.6
20.03.2-0ubuntu0.20.04.6
Ubuntu Ubuntu=20.04
All of the following
ubuntu/ovn-common<20.03.2-0ubuntu0.20.04.6
20.03.2-0ubuntu0.20.04.6
Ubuntu Ubuntu=20.04
All of the following
ubuntu/ovn-docker<20.03.2-0ubuntu0.20.04.6
20.03.2-0ubuntu0.20.04.6
Ubuntu Ubuntu=20.04
All of the following
ubuntu/ovn-host<20.03.2-0ubuntu0.20.04.6
20.03.2-0ubuntu0.20.04.6
Ubuntu Ubuntu=20.04
All of the following
ubuntu/ovn-ic<20.03.2-0ubuntu0.20.04.6
20.03.2-0ubuntu0.20.04.6
Ubuntu Ubuntu=20.04
Event History
Mar 31, 2025
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-7396-1?
The USN-7396-1 vulnerability has a medium severity level.
2
How do I fix USN-7396-1?
To fix USN-7396-1, upgrade the affected OVN packages to versions 24.09.0-1ubuntu0.1 or higher.
3
What is the impact of USN-7396-1?
The USN-7396-1 vulnerability may allow a remote attacker to bypass egress ACL rules by sending crafted UDP packets.
4
Which Ubuntu versions are affected by USN-7396-1?
USN-7396-1 affects Ubuntu versions 20.04, 22.04, and 24.04 through specific OVN package iterations.
5
What are the packages affected by USN-7396-1?
The affected packages include ovn-central, ovn-common, ovn-docker, ovn-host, and ovn-ic.