Critical Security Advisory: Open vSwitch Vulnerability in Red Hat Enterprise Linux 7
Summary
RHSA-2020:2298: Red Hat Security Advisory: openvswitch security, bug fix and enhancement update. Affects openvswitch versions < 0:2.9.0-130.el7fdp. Fixed in 0:2.9.0-130.el7fdp. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Open vSwitch is a production-quality, multilayer virtual switch designed to enable network automation while supporting standard management interfaces and protocols. It is widely used in cloud computing environments and provides advanced features such as network virtualization and traffic management. The vulnerability in question affects multiple components of Open vSwitch, including its core functionalities and related packages, making it crucial for users to address this issue promptly.
Vulnerability Detail
The vulnerability, identified as CVE-2020-10722 and CVE-2020-10723, arises from improper handling of certain network packets, which could allow an attacker to execute arbitrary code or cause a denial of service. This vulnerability has a CVSS score of 6.7, indicating a medium severity level. If exploited, it could lead to significant disruptions in network services and compromise the security of the affected systems.
How To Fix
Minimum fixed version
0:2.9.0-130.el7fdp
This is the first release that contains the fix.
sudo dnf update openvswitchTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict access to the Open vSwitch management interfaces and monitor network traffic for unusual activities. However, this is not a permanent solution and should only be used until the packages are updated.
Conclusion
The Open vSwitch vulnerability poses a significant risk to users of Red Hat Enterprise Linux 7. It is essential to update the affected packages to the patched version to mitigate potential threats. Users should also consider using tools like Vulert to monitor for vulnerabilities in their software.
See every vulnerability recorded for openvswitch →
FAQ
Open vSwitch is a multilayer virtual switch designed for network automation in cloud environments.
Exploitation of this vulnerability can lead to arbitrary code execution or denial of service, affecting network services.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
The CVSS score of this vulnerability is 6.7, indicating a medium severity level.
It is recommended to regularly check for updates and apply them promptly to ensure security and stability.
Related vulnerabilities
Recent vulnerabilities recorded for openvswitch.
