The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0738-1 advisory.

  - A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which     may result in a denial of service and invalid memory accesses. Triggering this issue requires that     hardware offloading via the netlink path is enabled. (CVE-2023-3966)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1235 advisory.

    Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote     per-flow control of traffic.

    Security Fix(es):

    * openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet (CVE-2023-3966)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1234 advisory.

    Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote     per-flow control of traffic.

    Security Fix(es):

    * openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet (CVE-2023-3966)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0922-1 advisory.

  - A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which     may result in a denial of service and invalid memory accesses. Triggering this issue requires that     hardware offloading via the netlink path is enabled. (CVE-2023-3966)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which     may result in a denial of service and invalid memory accesses. Triggering this issue requires that     hardware offloading via the netlink path is enabled. (CVE-2023-3966)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a4530e9bfe advisory.

    Update to 3.2.2     It indirectly fix CVE-2023-3966 and CVE-2023-5366

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-1f26ce7731 advisory.

    Update to 3.3.0     Remove network-scripts subpackage starting from Fedora 40     Backport a simple fix to avoid SSL db: implementation test to fail     It also indirectly fix CVE-2023-3966 and CVE-2023-5366

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of openvswitch installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3966 advisory.

  - A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which     May result in a denial of service and invalid memory accesses. Triggering this issue requires that     hardware offloading via the netlink path is enabled. (CVE-2023-3966)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1227 advisory.

    Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote     per-flow control of traffic.

    Security Fix(es):

    * openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet (CVE-2023-3966)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6690-1 advisory.

    Timothy Redaelli and Haresh Khandelwal discovered that Open vSwitch incorrectly handled certain crafted     Geneve packets when hardware offloading via the netlink path is enabled. A remote attacker could possibly     use this issue to cause Open vSwitch to crash, leading to a denial of service. (CVE-2023-3966)

    It was discovered that Open vSwitch incorrectly handled certain ICMPv6 Neighbor Advertisement packets. A     remote attacker could possibly use this issue to redirect traffic to arbitrary IP addresses.
    (CVE-2023-5366)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0912-1 advisory.

  - A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which     may result in a denial of service and invalid memory accesses. Triggering this issue requires that     hardware offloading via the netlink path is enabled. (CVE-2023-3966)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0937-1 advisory.

  - A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which     may result in a denial of service and invalid memory accesses. Triggering this issue requires that     hardware offloading via the netlink path is enabled. (CVE-2023-3966)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5640 advisory.

    -----BEGIN PGP SIGNED MESSAGE-----     Hash: SHA512

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5640-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     March 14, 2024                        https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : openvswitch     CVE ID         : CVE-2023-3966 CVE-2023-5366     Debian Bug     : 1063492

    Two vulnerabilities were discovered in Open vSwitch, a software-based     Ethernet virtual switch, which could result in a bypass of OpenFlow     rules or denial of service.

    For the oldstable distribution (bullseye), these problems have been fixed     in version 2.15.0+ds1-2+deb11u5. This update also adresses a memory leak     tracked as CVE-2024-22563.

    For the stable distribution (bookworm), these problems have been fixed in     version 3.1.0-2+deb12u1.

    We recommend that you upgrade your openvswitch packages.

    For the detailed security status of openvswitch please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/openvswitch

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmXy+NgACgkQEMKTtsN8     TjasEQ//V4q2/qeHlZk+Sr/73jLvDOA7u6O+FxGGi+LHBiYIoUlD+E2jEq/pAzaK     /hlpHCKO1g5bkf7/TcA9TaMyxo498LmT6/TX6SNB+lxOcJQlS8KyT/JtNQt31nk4     LND1IU/WFliMdNQoqwYgZVp6innCmb2hTYcxTKeGeQndnaTRIGo/FShxgCBZHwOJ     KB39eg0hQCDgx1DzfkA0e9u/I7Vq4MKEitV5u1H+Uf9embZaUsfwJCSaeshuxmp4     U20r2V9hxXVYrhAeFWYGiDEY+Di4O9fDOVLw2An19ncQjDquLfRYqdys8AMxzi3+     Vm0VasMAmZlEhdjcSjtotMI3tjgLcWGOz8BGdBUTAKK0FMtzPHLMhjfJ/cpC6jxZ     19ZJcD3OUDIA6nf4CZjW4BOCImukqm9EUJtcQFZAGONdkelNYiz6V5R6IpbAVtLP     Vkx5yyWWEPXau6eZKhKO0aMcBiAGUYs2LI0rmrmPBdTtQcZJmTx7U+jZiPO6Dx0Y     P5DMwY23Z8GWPZeDX/2C8HBPqAMKfsWzIOEcXJ0HlAnVyJnC7XGBb+q4W+RFDWhc     XYbi40SyyHrDqYBg/ne7WxEnmzfMk3F9cqRCn+owV2lbYxYRKIDZngyg2JK3sdjM     UfnFE+5D8QRvxQQMYM9H8q3iBzR1KVEi6cpUUoTZCz6qI5rcH6E=     =ZEHS
    -----END PGP SIGNATURE-----



Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
191475	SUSE SLES15 / openSUSE 15 Security Update : openvswitch3 (SUSE-SU-2024:0738-1)	Nessus	SuSE Local Security Checks	3/2/2024	3/6/2024	high
191722	RHEL 8 : openvswitch3.1 (RHSA-2024:1235)	Nessus	Red Hat Local Security Checks	3/7/2024	11/7/2024	medium
191724	RHEL 8 : openvswitch2.17 (RHSA-2024:1234)	Nessus	Red Hat Local Security Checks	3/7/2024	11/7/2024	medium
192498	SUSE SLES15 Security Update : openvswitch (SUSE-SU-2024:0922-1)	Nessus	SuSE Local Security Checks	3/23/2024	3/23/2024	high
226186	Linux Distros Unpatched Vulnerability : CVE-2023-3966	Nessus	Misc.	3/5/2025	3/5/2025	high
192171	Fedora 39 : openvswitch (2024-a4530e9bfe)	Nessus	Fedora Local Security Checks	3/15/2024	11/14/2024	medium
194715	Fedora 40 : openvswitch (2024-1f26ce7731)	Nessus	Fedora Local Security Checks	4/29/2024	11/14/2024	medium
201592	CBL Mariner 2.0 Security Update: openvswitch (CVE-2023-3966)	Nessus	MarinerOS Local Security Checks	7/3/2024	7/3/2024	high
191723	RHEL 9 : openvswitch3.1 (RHSA-2024:1227)	Nessus	Red Hat Local Security Checks	3/7/2024	11/7/2024	medium
191928	Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : Open vSwitch vulnerabilities (USN-6690-1)	Nessus	Ubuntu Local Security Checks	3/12/2024	8/27/2024	medium
192231	SUSE SLES15 Security Update : openvswitch (SUSE-SU-2024:0912-1)	Nessus	SuSE Local Security Checks	3/19/2024	3/19/2024	high
192504	SUSE SLES15 / openSUSE 15 Security Update : openvswitch (SUSE-SU-2024:0937-1)	Nessus	SuSE Local Security Checks	3/23/2024	3/23/2024	high
192117	Debian dsa-5640 : openvswitch-common - security update	Nessus	Debian Local Security Checks	3/14/2024	1/24/2025	medium

Detections

Analytics

Plugins Search

high

medium

medium

high

high

medium

medium

high

medium

medium

high

high

medium