Riskcovery

CVE-2023-3153

Service monitor mac flow is not rate limited

State
Published
Severity
5.3 Medium
Published
Oct 4, 2023
Updated
Sep 19, 2024
Reserved
Jun 7, 2023

Read the record on cve.org

Description

A flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit. This issue could allow an attacker to cause a denial of service, including on deployments with CoPP enabled and properly configured.

Scores

CVSSScoreVectorSource
3.15.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lredhat

Weaknesses

  • CWE-400 Uncontrolled Resource Consumption

Affected Products

ProductVersions
ovnn/a
  • 22.12.1Not affected
  • 22.03.3Not affected
  • 23.06.1Not affected
  • 23.03.1Not affected
  • 22.09.2Not affected
Fast Datapath for RHEL 7Red Hat
    Fast Datapath for RHEL 7Red Hat
      Fast Datapath for RHEL 7Red Hat
        Fast Datapath for RHEL 8Red Hat
          Fast Datapath for RHEL 8Red Hat
            Fast Datapath for RHEL 8Red Hat
              Fast Datapath for RHEL 8Red Hat
                Fast Datapath for RHEL 8Red Hat
                  Fast Datapath for RHEL 8Red Hat
                    Fast Datapath for RHEL 8Red Hat
                      Fast Datapath for RHEL 8Red Hat
                        Fast Datapath for RHEL 9Red Hat
                          Fast Datapath for RHEL 9Red Hat
                            Fast Datapath for RHEL 9Red Hat
                              Fast Datapath for RHEL 9Red Hat
                                Fast Datapath for RHEL 9Red Hat
                                  Red Hat OpenShift Container Platform 4Red Hat
                                    Red Hat OpenShift Container Platform 4Red Hat
                                      Red Hat OpenShift Container Platform 4Red Hat
                                        Red Hat OpenShift Container Platform 4Red Hat
                                          Red Hat OpenShift Container Platform 4Red Hat
                                            Red Hat OpenShift Container Platform 4Red Hat
                                              Red Hat OpenShift Container Platform 4Red Hat
                                                Red Hat OpenShift Container Platform 4Red Hat
                                                  Red Hat OpenStack Platform 13 (Queens)Red Hat
                                                    FedoraFedora

                                                      References

                                                      Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.