CVE-2025-0650

Ovn: egress acls may be bypassed via specially crafted udp packet

State: Published
Severity: 8.1 High
Published: Jan 23, 2025
Updated: Nov 20, 2025
Reserved: Jan 22, 2025

Description

A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	redhat

Weaknesses

CWE-284 Improper Access Control

Affected Products

Product	Versions
ovn	22.03.8Not affected 24.03.5Not affected 24.09.2Not affected
Fast Datapath for Red Hat Enterprise Linux 8Red Hat	0:22.03.7-11.el8fdp and laterNot affected
Fast Datapath for Red Hat Enterprise Linux 8Red Hat	0:22.06.0-273.el8fdp and laterNot affected
Fast Datapath for Red Hat Enterprise Linux 8Red Hat	0:22.09.2-86.el8fdp and laterNot affected
Fast Datapath for Red Hat Enterprise Linux 8Red Hat	0:22.12.1-107.el8fdp and laterNot affected
Fast Datapath for Red Hat Enterprise Linux 8Red Hat	0:23.03.3-22.el8fdp and laterNot affected
Fast Datapath for Red Hat Enterprise Linux 8Red Hat	0:23.06.4-26.el8fdp and laterNot affected
Fast Datapath for Red Hat Enterprise Linux 9Red Hat	0:22.03.7-11.el9fdp and laterNot affected
Fast Datapath for Red Hat Enterprise Linux 9Red Hat	0:22.06.0-273.el9fdp and laterNot affected
Fast Datapath for Red Hat Enterprise Linux 9Red Hat	0:22.09.2-86.el9fdp and laterNot affected
Fast Datapath for Red Hat Enterprise Linux 9Red Hat	0:22.12.1-107.el9fdp and laterNot affected
Fast Datapath for Red Hat Enterprise Linux 9Red Hat	0:23.03.3-22.el9fdp and laterNot affected
Fast Datapath for Red Hat Enterprise Linux 9Red Hat	0:23.06.4-26.el9fdp and laterNot affected
Fast Datapath for Red Hat Enterprise Linux 9Red Hat	0:23.09.6-12.el9fdp and laterNot affected
Fast Datapath for Red Hat Enterprise Linux 9Red Hat	0:24.03.4-53.el9fdp and laterNot affected
Fast Datapath for Red Hat Enterprise Linux 9Red Hat	0:24.09.1-66.el9fdp and laterNot affected
Red Hat OpenShift Container Platform 4Red Hat
Red Hat OpenShift Container Platform 4Red Hat
Red Hat OpenShift Container Platform 4Red Hat
Red Hat OpenShift Container Platform 4Red Hat
Red Hat OpenShift Container Platform 4Red Hat
Red Hat OpenShift Container Platform 4Red Hat
Red Hat OpenShift Container Platform 4Red Hat
Red Hat OpenShift Container Platform 4Red Hat

References

RHSA-2025:1083vendor-advisory
RHSA-2025:1084vendor-advisory
RHSA-2025:1085vendor-advisory
RHSA-2025:1086vendor-advisory
RHSA-2025:1087vendor-advisory
RHSA-2025:1088vendor-advisory
RHSA-2025:1089vendor-advisory
RHSA-2025:1090vendor-advisory
RHSA-2025:1091vendor-advisory
RHSA-2025:1092vendor-advisory
RHSA-2025:1093vendor-advisory
RHSA-2025:1094vendor-advisory
RHSA-2025:1095vendor-advisory
RHSA-2025:1096vendor-advisory
RHSA-2025:1097vendor-advisory
https://access.redhat.com/security/cve/CVE-2025-0650vdb-entry
RHBZ#2339537issue-tracking
https://www.openwall.com/lists/oss-security/2025/01/22/5
http://www.openwall.com/lists/oss-security/2025/01/22/11

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.