A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HFedora Project Fedora
OSFedoraproject33Lldpd Project Lldpd
APPLldpd Project< 1.0.8Openvswitch
APPOpenvswitch2.6.0 – 2.6.9 (excl.)2.8.0 – 2.8.10 (excl.)2.9.0 – 2.9.8 (excl.)2.10.0 – 2.10.6 (excl.)2.11.0 – 2.11.5 (excl.)2.12.0 – 2.12.2 (excl.)2.13.0 – 2.13.2 (excl.)2.14.0 – 2.14.1 (excl.)2.7.0 – 2.7.12 (excl.)Red Hat Enterprise Linux
OSRedhat7.08.0Red Hat OpenShift Container Platform
APPRedhat4.0Red Hat Openstack
APPRedhat1013Red Hat Virtualization
APPRedhat4.0Siemens Simatic Hmi Unified Comfort Panels
HWSiemensall versionsSiemens Simatic Hmi Unified Comfort Panels Firmware
OSSiemens< 17Siemens Simatic Net Cp 1243 1
HWSiemensall versionsSiemens Simatic Net Cp 1243 1 Firmware
OSSiemensall versionsSiemens Simatic Net Cp 1243 8 Irc
HWSiemensall versionsSiemens Simatic Net Cp 1243 8 Irc Firmware
OSSiemensall versionsSiemens Simatic Net Cp 1542sp 1
HWSiemensall versionsSiemens Simatic Net Cp 1542sp 1 Firmware
OSSiemensall versionsSiemens Simatic Net Cp 1542sp 1 Irc
HWSiemensall versionsSiemens Simatic Net Cp 1542sp 1 Irc Firmware
OSSiemensall versionsSiemens Simatic Net Cp 1543 1
HWSiemensall versionsSiemens Simatic Net Cp 1543 1 Firmware
OSSiemensall versionsSiemens Simatic Net Cp 1543sp 1
HWSiemensall versionsSiemens Simatic Net Cp 1543sp 1 Firmware
OSSiemensall versionsSiemens Simatic Net Cp 1545 1
HWSiemensall versionsSiemens Simatic Net Cp 1545 1 Firmware
OSSiemensall versionsSiemens Sinumerik One
HWSiemensall versionsSiemens Sinumerik One Firmware
OSSiemens< 2.0.1Siemens Tim 1531 Irc
HWSiemensall versionsSiemens Tim 1531 Irc Firmware
OSSiemens< 2.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References
Related vulnerabilities
CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓same product
Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)
CVE-2024-4577CRITICAL9.8⚠ KEVPL ✓same product
PHP CGI argument injection – RCE na Windows przez mechanizm Best-Fit
CVE-2024-5274CRITICAL9.6⚠ KEVPL ✓same product
Type Confusion w V8 (Google Chrome) — RCE przez spreparowaną stronę HTML
CVE-2024-4947CRITICAL9.6⚠ KEVPL ✓same product
Type Confusion w silniku V8 Chrome — zdalne wykonanie kodu (RCE)
CVE-2024-4671CRITICAL9.6⚠ KEVPL ✓same product
Use-after-free w Google Chrome Visuals umożliwiający ucieczkę z sandbox