CVE-2020-27827

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Open vSwitch is a production quality, multilayer virtual switch licensed under the open source Apache 2.0 license.

Security Fix(es):

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.(CVE-2020-35498)

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.(CVE-2020-27827)

Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.(CVE-2015-8011)

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

LLDP is an industry standard protocol designed to supplant proprietary Link-Layer protocols such as EDP or CDP. The goal of LLDP is to provide an inter-vendor compatible mechanism to deliver Link-Layer notifications to adjacent network devices.

Security Fix(es):

• lldp/openvswitch: denial of service via externally triggered memory leak (CVE-2020-27827)
• lldpd: out-of-bounds read when decoding SONMP packets (CVE-2021-43612)
• lldpd: CDP PDU Packet cdp.c out-of-bounds read (CVE-2023-41910)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

• CVE-2020-27827: fix memory allocation issue caused by specially crafted LLDP packets

This update for openvswitch fixes the following issues:

• openvswitch was updated to 2.13.2
• CVE-2020-27827: Fixed a memory leak when parsing lldp packets (bsc#1181345)

This update was imported from the SUSE:SLE-15-SP2:Update update project.

These are all security issues fixed in the liblldpctl4-1.0.12-1.2 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the libopenvswitch-2_14-0-2.14.2-11.3 package on the GA media of openSUSE Tumbleweed.

LLDP is an industry standard protocol designed to supplant proprietary Link-Layer protocols such as EDP or CDP. The goal of LLDP is to provide an inter-vendor compatible mechanism to deliver Link-Layer notifications to adjacent network devices.

Security Fix(es):

• lldp/openvswitch: denial of service via externally triggered memory leak (CVE-2020-27827)

• lldpd: out-of-bounds read when decoding SONMP packets (CVE-2021-43612)

• lldpd: CDP PDU Packet cdp.c out-of-bounds read (CVE-2023-41910)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.

This update for openvswitch fixes the following issues:

• openvswitch was updated to 2.13.2
• CVE-2020-27827: Fixed a memory leak when parsing lldp packets (bsc#1181345)

This update for openvswitch fixes the following issues:

• openvswitch was updated to 2.11.5
• CVE-2020-27827: Fixed a memory leak when parsing lldp packets (bsc#1181345)

This update for openvswitch fixes the following issues:

• openvswitch was updated to 2.11.5
• CVE-2020-27827: Fixed a memory leak when parsing lldp packets (bsc#1181345)

This update for openvswitch fixes the following issues:

• openvswitch was updated to 2.7.12
• CVE-2020-27827: Fixed a memory leak when parsing lldp packets (bsc#1181345)
  A lot more minor bugs have been fixed with this openvswitch version. Please refer to the changelog of the openvswitch.rpm file in order to obtain a list of all changes.

This update for openvswitch fixes the following issues:

• openvswitch was updated to 2.8.10
• CVE-2020-27827: Fixed a memory leak when parsing lldp packets (bsc#1181345) A lot more minor bugs have been fixed with this openvswitch version. Please refer to the changelog of the openvswitch.rpm file in order to obtain a list of all changes.

This update for openvswitch fixes the following issues:

• openvswitch was updated to 2.5.11
• CVE-2020-27827: Fixed a memory leak when parsing lldp packets (bsc#1181345)
• datapath: Clear the L4 portion of the key for 'later' fragments
• datapath: Properly set L4 keys on 'later' IP fragments
• ofproto-dpif: Fix using uninitialised memory in user_action_cookie.
• stream-ssl: Fix crash on NULL private key and valid certificate.
• datapath: fix flow actions reallocation

This update for openvswitch fixes the following issues:

• openvswitch was updated to 2.11.5
• CVE-2020-27827: Fixed a memory leak when parsing lldp packets (bsc#1181345)

Jonas Rudloff discovered that Open vSwitch incorrectly handled certain malformed LLDP packets. A remote attacker could use this issue to cause Open vSwitch to crash, resulting in a denial of service, or possibly execute arbitrary code.