CVE-2020-27827

State: Published
Severity: 7.5 High
Published: Mar 18, 2021
Updated: Dec 3, 2025
Reserved: Oct 27, 2020

Description

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-400

Affected Products

Product	Versions
lldp/openvswitchn/a	lldpd 1.0.8, openvswitch 2.14.1, openvswitch 2.13.2, openvswitch 2.12.2, openvswitch 2.11.5, openvswitch 2.10.6, openvswitch 2.9.8, openvswitch 2.8.10, openvswitch 2.7.12, openvswitch 2.6.9Affected

References

https://bugzilla.redhat.com/show_bug.cgi?id=1921438
https://mail.openvswitch.org/pipermail/ovs-dev/2021-January/379471.html
https://cert-portal.siemens.com/productcert/pdf/ssa-941426.pdf
https://us-cert.cisa.gov/ics/advisories/icsa-21-194-07
FEDORA-2023-88991d2713vendor-advisory
FEDORA-2023-c0c184a019vendor-advisory
FEDORA-2023-3e4feeadecvendor-advisory
GLSA-202311-16vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.