CVE-2024-2182
Full vulnerability record from the local CVENow database.
Description
A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service.
Severity
MEDIUM
CVSS score
6.5
(v3.1)
Vulnerability status
Deferred
Source identifier
Published
2024-03-12 17:15:59.190000
Last modified
2026-10-19 11:17:15.617000
View original CVE JSON
{
"id": "CVE-2024-2182",
"sourceIdentifier": "[email protected]",
"published": "2024-03-12T17:15:59.190",
"lastModified": "2026-10-19T11:17:15.617",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service."
},
{
"lang": "es",
"value": "Se encontró una falla en la Red Virtual Abierta (OVN). En los clústeres OVN donde se utiliza BFD entre hipervisores para alta disponibilidad, un atacante puede inyectar paquetes BFD especialmente manipulados desde cargas de trabajo sin privilegios, incluidas máquinas virtuales o contenedores, que pueden desencadenar una denegación de servicio."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"defaultStatus": "unaffected",
"collectionURL": "https://www.github.com/ovn-org/ovn/",
"packageName": "ovn",
"versions": [
{
"version": "20.03.0",
"lessThan": "*",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for Red Hat Enterprise Linux 8",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn23.06",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"versions": [
{
"version": "0:23.06.1-112.el8fdp",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for Red Hat Enterprise Linux 8",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn22.12",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"versions": [
{
"version": "0:22.12.1-94.el8fdp",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for Red Hat Enterprise Linux 8",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn22.03",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"versions": [
{
"version": "0:22.03.3-71.el8fdp",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for Red Hat Enterprise Linux 8",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn23.03",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"versions": [
{
"version": "0:23.03.1-100.el8fdp",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for Red Hat Enterprise Linux 8",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn-2021",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"versions": [
{
"version": "0:21.12.0-142.el8fdp",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for Red Hat Enterprise Linux 9",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn23.09",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
],
"versions": [
{
"version": "0:23.09.0-136.el9fdp",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for Red Hat Enterprise Linux 9",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn23.06",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
],
"versions": [
{
"version": "0:23.06.1-112.el9fdp",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for Red Hat Enterprise Linux 9",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn22.12",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
],
"versions": [
{
"version": "0:22.12.1-94.el9fdp",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for Red Hat Enterprise Linux 9",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn22.03",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
],
"versions": [
{
"version": "0:22.03.3-71.el9fdp",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for Red Hat Enterprise Linux 9",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn23.03",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
],
"versions": [
{
"version": "0:23.03.1-100.el9fdp",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 10",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn25.03",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10::fastdatapath"
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 10",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn25.09",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10::fastdatapath"
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 10",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn26.03",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10::fastdatapath"
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 7",
"defaultStatus": "unknown",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn2.11",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7::fastdatapath"
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 7",
"defaultStatus": "unknown",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn2.12",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7::fastdatapath"
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 7",
"defaultStatus": "unknown",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn2.13",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7::fastdatapath"
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 8",
"defaultStatus": "unknown",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn2.11",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 8",
"defaultStatus": "unknown",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn2.12",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 8",
"defaultStatus": "unknown",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn2.13",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 8",
"defaultStatus": "unknown",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn22.06",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 8",
"defaultStatus": "unknown",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn22.09",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 9",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn-2021",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 9",
"defaultStatus": "unknown",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn22.06",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 9",
"defaultStatus": "unknown",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn22.09",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 9",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn24.03",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 9",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn24.09",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 9",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn25.03",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 9",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn25.09",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
]
},
{
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 9",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn26.03",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn22.06",
"cpes": [
"cpe:/a:redhat:openshift:4"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn22.09",
"cpes": [
"cpe:/a:redhat:openshift:4"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn22.12",
"cpes": [
"cpe:/a:redhat:openshift:4"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn23.03",
"cpes": [
"cpe:/a:redhat:openshift:4"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn23.06",
"cpes": [
"cpe:/a:redhat:openshift:4"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn23.09",
"cpes": [
"cpe:/a:redhat:openshift:4"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn24.03",
"cpes": [
"cpe:/a:redhat:openshift:4"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn24.09",
"cpes": [
"cpe:/a:redhat:openshift:4"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 13 (Queens)",
"defaultStatus": "unknown",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "ovn2.11",
"cpes": [
"cpe:/a:redhat:openstack:13"
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2024-03-13T14:24:40.610508Z",
"id": "CVE-2024-2182",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-346"
}
]
}
],
"references": [
{
"url": "https://access.redhat.com/errata/RHSA-2024:1385",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1386",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1387",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1388",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1390",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1391",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1392",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1393",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1394",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:4035",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2024-2182",
"source": "[email protected]"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267840",
"source": "[email protected]"
},
{
"url": "https://mail.openvswitch.org/pipermail/ovs-announce/2024-March/000346.html",
"source": "[email protected]"
},
{
"url": "https://www.openwall.com/lists/oss-security/2024/03/12/5",
"source": "[email protected]"
},
{
"url": "http://www.openwall.com/lists/oss-security/2024/03/12/5",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1385",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1386",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1387",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1388",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1390",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1391",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1392",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1393",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1394",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:4035",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2024-2182",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267840",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/APR4GCVCMQD3DQUKXDNGIXCCYGE5V7IT/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/CB4N522FCS4XWAPUKRWZF6QZ657FCIDF/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/XRKXOOOKD56TY3JQVB45N3GCTX3EG4BV/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://mail.openvswitch.org/pipermail/ovs-announce/2024-March/000346.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.openwall.com/lists/oss-security/2024/03/12/5",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
]
}