Medium severity · published Mar 12, 2024
CVE-2024-2182
Ovn: insufficient validation of bfd packets may lead to denial of service
6.5
CVSS
0.8%
EPSS
No
On KEV
Description
A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FD
Fast Datapath for RHEL 10 · Red Hat
All versions, or not specified · source: vendor
FD
Fast Datapath for RHEL 7 · Red Hat
All versions, or not specified · source: vendor
FD
Fast Datapath for RHEL 8 · Red Hat
All versions, or not specified · source: vendor
FD
Fast Datapath for RHEL 9 · Red Hat
All versions, or not specified · source: vendor
FD
Fast Datapath for Red Hat Enterprise Linux 8 · Red Hat
All versions, or not specified · source: vendor
FD
Fast Datapath for Red Hat Enterprise Linux 9 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat OpenShift Container Platform 4 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat OpenStack Platform 13 (Queens) · Red Hat
All versions, or not specified · source: vendor
Affected product
FD
Fast Datapath for Red Hat Enterprise Linux 8
Red Hat
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-2182
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-2182
access.redhat.com
https://access.redhat.com/errata/RHSA-2024:1385
access.redhat.com
https://access.redhat.com/errata/RHSA-2024:1386
access.redhat.com
https://access.redhat.com/errata/RHSA-2024:1387
access.redhat.com
https://access.redhat.com/errata/RHSA-2024:1388
access.redhat.com
https://access.redhat.com/errata/RHSA-2024:1390
access.redhat.com
https://access.redhat.com/errata/RHSA-2024:1391
More from Fast Datapath for Red Hat Enterprise Linux 8
8.6
CVE-2026-5367
Ovn: ovn: information disclosure via crafted dhcpv6 packets
7.4
CVE-2024-11614
Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library
6.5
CVE-2026-5265
Ovn: ovn: heap over-read in icmp error response generation