A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1091 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network abstraction.  OVN complements the     existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2     and L3 overlays and security groups.

    Security Fix(es):

    * ovn: egress ACLs may be bypassed via specially crafted UDP packet (CVE-2025-0650)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1095 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network abstraction.  OVN complements the     existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2     and L3 overlays and security groups.

    Security Fix(es):

    * ovn: egress ACLs may be bypassed via specially crafted UDP packet (CVE-2025-0650)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1093 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network abstraction.  OVN complements the     existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2     and L3 overlays and security groups.

    Security Fix(es):

    * ovn: egress ACLs may be bypassed via specially crafted UDP packet (CVE-2025-0650)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1096 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network abstraction.  OVN complements the     existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2     and L3 overlays and security groups.

    Security Fix(es):

    * ovn: egress ACLs may be bypassed via specially crafted UDP packet (CVE-2025-0650)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1090 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network abstraction.  OVN complements the     existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2     and L3 overlays and security groups.

    Security Fix(es):

    * ovn: egress ACLs may be bypassed via specially crafted UDP packet (CVE-2025-0650)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1087 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network abstraction.  OVN complements the     existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2     and L3 overlays and security groups.

    Security Fix(es):

    * ovn: egress ACLs may be bypassed via specially crafted UDP packet (CVE-2025-0650)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1088 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network abstraction.  OVN complements the     existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2     and L3 overlays and security groups.

    Security Fix(es):

    * ovn: egress ACLs may be bypassed via specially crafted UDP packet (CVE-2025-0650)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1086 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network abstraction.  OVN complements the     existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2     and L3 overlays and security groups.

    Security Fix(es):

    * ovn: egress ACLs may be bypassed via specially crafted UDP packet (CVE-2025-0650)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1085 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network abstraction.  OVN complements the     existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2     and L3 overlays and security groups.

    Security Fix(es):

    * ovn: egress ACLs may be bypassed via specially crafted UDP packet (CVE-2025-0650)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1094 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network abstraction.  OVN complements the     existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2     and L3 overlays and security groups.

    Security Fix(es):

    * ovn: egress ACLs may be bypassed via specially crafted UDP packet (CVE-2025-0650)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1084 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network abstraction.  OVN complements the     existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2     and L3 overlays and security groups.

    Security Fix(es):

    * ovn: egress ACLs may be bypassed via specially crafted UDP packet (CVE-2025-0650)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1092 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network abstraction.  OVN complements the     existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2     and L3 overlays and security groups.

    Security Fix(es):

    * ovn: egress ACLs may be bypassed via specially crafted UDP packet (CVE-2025-0650)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1089 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network abstraction.  OVN complements the     existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2     and L3 overlays and security groups.

    Security Fix(es):

    * ovn: egress ACLs may be bypassed via specially crafted UDP packet (CVE-2025-0650)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1097 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network abstraction.  OVN complements the     existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2     and L3 overlays and security groups.

    Security Fix(es):

    * ovn: egress ACLs may be bypassed via specially crafted UDP packet (CVE-2025-0650)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1083 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network abstraction.  OVN complements the     existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2     and L3 overlays and security groups.

    Security Fix(es):

    * ovn: egress ACLs may be bypassed via specially crafted UDP packet (CVE-2025-0650)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
215100	RHEL 9 : ovn22.09 (RHSA-2025:1091)	Nessus	Red Hat Local Security Checks	high
215099	RHEL 9 : ovn23.09 (RHSA-2025:1095)	Nessus	Red Hat Local Security Checks	high
215097	RHEL 9 : ovn23.03 (RHSA-2025:1093)	Nessus	Red Hat Local Security Checks	high
215096	RHEL 9 : ovn24.03 (RHSA-2025:1096)	Nessus	Red Hat Local Security Checks	high
215095	RHEL 9 : ovn22.06 (RHSA-2025:1090)	Nessus	Red Hat Local Security Checks	high
215094	RHEL 8 : ovn23.03 (RHSA-2025:1087)	Nessus	Red Hat Local Security Checks	high
215093	RHEL 8 : ovn23.06 (RHSA-2025:1088)	Nessus	Red Hat Local Security Checks	high
215091	RHEL 8 : ovn22.12 (RHSA-2025:1086)	Nessus	Red Hat Local Security Checks	high
215089	RHEL 8 : ovn22.09 (RHSA-2025:1085)	Nessus	Red Hat Local Security Checks	high
215088	RHEL 9 : ovn23.06 (RHSA-2025:1094)	Nessus	Red Hat Local Security Checks	high
215084	RHEL 8 : ovn22.06 (RHSA-2025:1084)	Nessus	Red Hat Local Security Checks	high
215083	RHEL 9 : ovn22.12 (RHSA-2025:1092)	Nessus	Red Hat Local Security Checks	high
215082	RHEL 9 : ovn22.03 (RHSA-2025:1089)	Nessus	Red Hat Local Security Checks	high
215080	RHEL 9 : ovn24.09 (RHSA-2025:1097)	Nessus	Red Hat Local Security Checks	high
215078	RHEL 8 : ovn22.03 (RHSA-2025:1083)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2025-0650

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high