Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

Ovn: egress acls may be bypassed via specially crafted udp packet (ovn)

CVE-2025-0650
HIGH 8.1

At a glance

Source
NVD
EPSS
EPSS 0.87 % · percentile 59 ()
State
PUBLISHED
Published
Updated
Assigner
redhat
NVD status
Deferred

Search on…

Description

A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.

Weaknesses (CWE)

  • CWE-284 — Improper Access Control

References

Scores

VersionScoreVectorScored by
CVSS 3.1HIGH 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hredhat
CVSS 3.1HIGH 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HNVD · secalert@redhat.com (Secondary)

European references

Affected products

ProductVersions
ovnunaffected 22.03.8 ; unaffected 24.03.5 ; unaffected 24.09.2
Red Hat · Fast Datapath for Red Hat Enterprise Linux 8unaffected 0:22.03.7-11.el8fdp < *
Red Hat · Fast Datapath for Red Hat Enterprise Linux 8unaffected 0:22.06.0-273.el8fdp < *
Red Hat · Fast Datapath for Red Hat Enterprise Linux 8unaffected 0:22.09.2-86.el8fdp < *
Red Hat · Fast Datapath for Red Hat Enterprise Linux 8unaffected 0:22.12.1-107.el8fdp < *
Red Hat · Fast Datapath for Red Hat Enterprise Linux 8unaffected 0:23.03.3-22.el8fdp < *
Red Hat · Fast Datapath for Red Hat Enterprise Linux 8unaffected 0:23.06.4-26.el8fdp < *
Red Hat · Fast Datapath for Red Hat Enterprise Linux 9unaffected 0:22.03.7-11.el9fdp < *
Red Hat · Fast Datapath for Red Hat Enterprise Linux 9unaffected 0:22.06.0-273.el9fdp < *
Red Hat · Fast Datapath for Red Hat Enterprise Linux 9unaffected 0:22.09.2-86.el9fdp < *
Red Hat · Fast Datapath for Red Hat Enterprise Linux 9unaffected 0:22.12.1-107.el9fdp < *
Red Hat · Fast Datapath for Red Hat Enterprise Linux 9unaffected 0:23.03.3-22.el9fdp < *
Red Hat · Fast Datapath for Red Hat Enterprise Linux 9unaffected 0:23.06.4-26.el9fdp < *
Red Hat · Fast Datapath for Red Hat Enterprise Linux 9unaffected 0:23.09.6-12.el9fdp < *
Red Hat · Fast Datapath for Red Hat Enterprise Linux 9unaffected 0:24.03.4-53.el9fdp < *
Red Hat · Fast Datapath for Red Hat Enterprise Linux 9unaffected 0:24.09.1-66.el9fdp < *
Red Hat · Red Hat OpenShift Container Platform 4
Red Hat · Red Hat OpenShift Container Platform 4
Red Hat · Red Hat OpenShift Container Platform 4
Red Hat · Red Hat OpenShift Container Platform 4

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD