Every CVE Search/ Get API key

CVE-2020-35498

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet...

7.5 HighPublic exploitFix available

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

8.03%Up 6.5 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Record
CVE-2020-35498
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
7.8 HighAV:N/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-400
Updated
2026-11-02
CVE List 7.5

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Record
CVE-2020-35498
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
EUVDEUVD-2020-23167 7.5

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Record
EUVD-2020-23167
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-9978-p96m-85pj 7.5

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet...

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Record
GHSA-9978-p96m-85pj
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
OSVALPINE-CVE-2020-35498 7.5

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Record
ALPINE-CVE-2020-35498
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSV 7.5

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Record
CVE-2020-35498
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 19 moreShow less
OSVDEBIAN-CVE-2020-35498 7.5

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Record
DEBIAN-CVE-2020-35498
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2021-1179 9.8

openvswitch security update

Open vSwitch is a production quality, multilayer virtual switch licensed under the open source Apache 2.0 license.

Security Fix(es):

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.(CVE-2020-35498)

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.(CVE-2020-27827)

Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.(CVE-2015-8011)

Record
OESA-2021-1179
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:0497 7.5

Red Hat Security Advisory: openvswitch2.13 security and bug fix update

Record
RHSA-2021:0497
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2021:0834 7.5

Red Hat Security Advisory: openvswitch2.11 security update

Record
RHSA-2021:0834
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2021:0835 7.5

Red Hat Security Advisory: openvswitch2.13 security update

Record
RHSA-2021:0835
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2021:0837 7.5

Red Hat Security Advisory: openvswitch2.11 security update

Record
RHSA-2021:0837
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2021:1050 7.5

Red Hat Security Advisory: openvswitch2.11 security update

Record
RHSA-2021:1050
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2021:2077 9.8

Red Hat Security Advisory: openvswitch security update

Record
RHSA-2021:2077
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:2456 7.5

Red Hat Security Advisory: Red Hat OpenStack Platform 13.0 (openvswitch2.11) security update

Record
RHSA-2021:2456
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-35498 7.5

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Record
UBUNTU-CVE-2020-35498
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2021:0283-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding (bsc#1181742).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Record
openSUSE-SU-2021:0283-1
Updated
2026-11-02
OSVSUSE-SU-2021:0436-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding (bsc#1181742).
Record
SUSE-SU-2021:0436-1
Updated
2026-11-02
OSVSUSE-SU-2021:0439-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding (bsc#1181742).
Record
SUSE-SU-2021:0439-1
Updated
2026-11-02
OSVSUSE-SU-2021:0440-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding (bsc#1181742).
Record
SUSE-SU-2021:0440-1
Updated
2026-11-02
OSVSUSE-SU-2021:0446-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding (bsc#1181742).
Record
SUSE-SU-2021:0446-1
Updated
2026-11-02
OSVSUSE-SU-2021:0451-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding (bsc#1181742).
Record
SUSE-SU-2021:0451-1
Updated
2026-11-02
OSVSUSE-SU-2021:0479-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding (bsc#1181742).
Record
SUSE-SU-2021:0479-1
Updated
2026-11-02
OSVSUSE-SU-2022:3384-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

  • CVE-2020-35498: Fixed packet parsing vulnerability (bsc#1181742).
Record
SUSE-SU-2022:3384-1
Updated
2026-11-02
OSVUSN-4729-1 No score

openvswitch vulnerability

Joakim Hindersson discovered that Open vSwitch incorrectly parsed certain network packets. A remote attacker could use this issue to cause a denial of service, or possibly alter packet classification.

Record
USN-4729-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openvswitch
Alpine:v3.13
 2.5.0 up to 2.12.3-r0
2.12.3-r0
openvswitch
Alpine:v3.14
 2.5.0 up to 2.12.3-r0
2.12.3-r0
openvswitch
Alpine:v3.15
 2.5.0 up to 2.12.3-r0
2.12.3-r0
openvswitch
Alpine:v3.16
 2.5.0 up to 2.12.3-r0
2.12.3-r0
openvswitch
Alpine:v3.17
 2.5.0 up to 2.12.3-r0
2.12.3-r0
openvswitch
Alpine:v3.18
 2.5.0 up to 2.12.3-r0
2.12.3-r0
openvswitch
Alpine:v3.19
 2.5.0 up to 2.12.3-r0
2.12.3-r0
openvswitch
Alpine:v3.20
 2.5.0 up to 2.12.3-r0
2.12.3-r0
openvswitch
Alpine:v3.21
 2.5.0 up to 2.12.3-r0
2.12.3-r0
openvswitch
Alpine:v3.22
 2.5.0 up to 2.12.3-r0
2.12.3-r0
Show 99 moreShow less
Affected packages
PackageAffectedFixed
openvswitch
Alpine:v3.23
 2.5.0 up to 2.12.3-r0
2.12.3-r0
openvswitch
Alpine:v3.24
 2.5.0 up to 2.12.3-r0
2.12.3-r0
openvswitch
Debian:12
 before 2.15.0~git20210104.def6eb1ea+dfsg1-5
2.15.0~git20210104.def6eb1ea+dfsg1-5
openvswitch
Debian:13
 before 2.15.0~git20210104.def6eb1ea+dfsg1-5
2.15.0~git20210104.def6eb1ea+dfsg1-5
openvswitch
Debian:14
 before 2.15.0~git20210104.def6eb1ea+dfsg1-5
2.15.0~git20210104.def6eb1ea+dfsg1-5
openvswitch
Debian:9
From an advisory covering 6 CVEs
 before 2.6.10-0+deb9u1, plus listed versions
2.6.2~pre+git20161223-3
2.6.10-0+deb9u1
openvswitch
Debian:10
 before 2.10.7+ds1-0+deb10u1, plus listed versions
2.10.0+2018.08.28+git.8ca7c82b7d+ds1-122.10.0+2018.08.28+git.8ca7c82b7d+ds1-12+deb10u12.10.0+2018.08.28+git.8ca7c82b7d+ds1-12+deb10u22.10.0+2018.08.28+git.8ca7c82b7d+ds1-132.10.6+ds1-0+deb10u1
2.10.7+ds1-0+deb10u1
openvswitch
openEuler:20.03-LTS-SP1
From an advisory covering 3 CVEs
 before 2.12.0-11.oe1
2.12.0-11.oe1
network-scripts-openvswitch2.13
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-79.5.el8fdp
0:2.13.0-79.5.el8fdp
openvswitch2.13
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-79.5.el8fdp
0:2.13.0-79.5.el8fdp
openvswitch2.13-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-79.5.el8fdp
0:2.13.0-79.5.el8fdp
openvswitch2.13-debugsource
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-79.5.el8fdp
0:2.13.0-79.5.el8fdp
openvswitch2.13-devel
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-79.5.el8fdp
0:2.13.0-79.5.el8fdp
openvswitch2.13-ipsec
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-79.5.el8fdp
0:2.13.0-79.5.el8fdp
openvswitch2.13-test
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-79.5.el8fdp
0:2.13.0-79.5.el8fdp
python3-openvswitch2.13
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-79.5.el8fdp
0:2.13.0-79.5.el8fdp
python3-openvswitch2.13-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-79.5.el8fdp
0:2.13.0-79.5.el8fdp
openvswitch2.11
Red Hat:enterprise_linux:7::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.11.3-86.el7fdp
0:2.11.3-86.el7fdp
openvswitch2.11-debuginfo
Red Hat:enterprise_linux:7::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.11.3-86.el7fdp
0:2.11.3-86.el7fdp
openvswitch2.11-devel
Red Hat:enterprise_linux:7::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.11.3-86.el7fdp
0:2.11.3-86.el7fdp
openvswitch2.11-test
Red Hat:enterprise_linux:7::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.11.3-86.el7fdp
0:2.11.3-86.el7fdp
python-openvswitch2.11
Red Hat:enterprise_linux:7::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.11.3-86.el7fdp
0:2.11.3-86.el7fdp
openvswitch2.13
Red Hat:enterprise_linux:7::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-81.el7fdp
0:2.13.0-81.el7fdp
openvswitch2.13-debuginfo
Red Hat:enterprise_linux:7::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-81.el7fdp
0:2.13.0-81.el7fdp
openvswitch2.13-devel
Red Hat:enterprise_linux:7::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-81.el7fdp
0:2.13.0-81.el7fdp
openvswitch2.13-ipsec
Red Hat:enterprise_linux:7::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-81.el7fdp
0:2.13.0-81.el7fdp
openvswitch2.13-test
Red Hat:enterprise_linux:7::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-81.el7fdp
0:2.13.0-81.el7fdp
python3-openvswitch2.13
Red Hat:enterprise_linux:7::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.13.0-81.el7fdp
0:2.13.0-81.el7fdp
network-scripts-openvswitch2.11
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.11.3-83.el8fdp
0:2.11.3-83.el8fdp
openvswitch2.11
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.11.3-83.el8fdp
0:2.11.3-83.el8fdp
openvswitch2.11-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.11.3-83.el8fdp
0:2.11.3-83.el8fdp
openvswitch2.11-debugsource
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.11.3-83.el8fdp
0:2.11.3-83.el8fdp
openvswitch2.11-devel
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.11.3-83.el8fdp
0:2.11.3-83.el8fdp
openvswitch2.11-test
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.11.3-83.el8fdp
0:2.11.3-83.el8fdp
python3-openvswitch2.11
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.11.3-83.el8fdp
0:2.11.3-83.el8fdp
python3-openvswitch2.11-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
From an advisory covering 2 CVEs
 before 0:2.11.3-83.el8fdp
0:2.11.3-83.el8fdp
openvswitch2.11
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 2 CVEs
 before 0:2.11.3-86.el7fdp
0:2.11.3-86.el7fdp
openvswitch2.11-debuginfo
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 2 CVEs
 before 0:2.11.3-86.el7fdp
0:2.11.3-86.el7fdp
openvswitch2.11-devel
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 2 CVEs
 before 0:2.11.3-86.el7fdp
0:2.11.3-86.el7fdp
ovn2.11
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 2 CVEs
 before 0:2.11.1-57.el7fdp
0:2.11.1-57.el7fdp
ovn2.11-debuginfo
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 2 CVEs
 before 0:2.11.1-57.el7fdp
0:2.11.1-57.el7fdp
ovn2.11-host
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 2 CVEs
 before 0:2.11.1-57.el7fdp
0:2.11.1-57.el7fdp
ovn2.11-vtep
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 2 CVEs
 before 0:2.11.1-57.el7fdp
0:2.11.1-57.el7fdp
python-openvswitch2.11
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 2 CVEs
 before 0:2.11.3-86.el7fdp
0:2.11.3-86.el7fdp
openvswitch
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 3 CVEs
 before 0:2.9.9-1.el7fdp
0:2.9.9-1.el7fdp
openvswitch-debuginfo
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 3 CVEs
 before 0:2.9.9-1.el7fdp
0:2.9.9-1.el7fdp
openvswitch-devel
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 3 CVEs
 before 0:2.9.9-1.el7fdp
0:2.9.9-1.el7fdp
python-openvswitch
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 3 CVEs
 before 0:2.9.9-1.el7fdp
0:2.9.9-1.el7fdp
openvswitch
Red Hat:enterprise_linux:7::fastdatapath
From an advisory covering 3 CVEs
 before 0:2.9.9-1.el7fdp
0:2.9.9-1.el7fdp
openvswitch-debuginfo
Red Hat:enterprise_linux:7::fastdatapath
From an advisory covering 3 CVEs
 before 0:2.9.9-1.el7fdp
0:2.9.9-1.el7fdp
openvswitch-devel
Red Hat:enterprise_linux:7::fastdatapath
From an advisory covering 3 CVEs
 before 0:2.9.9-1.el7fdp
0:2.9.9-1.el7fdp
openvswitch-test
Red Hat:enterprise_linux:7::fastdatapath
From an advisory covering 3 CVEs
 before 0:2.9.9-1.el7fdp
0:2.9.9-1.el7fdp
python-openvswitch
Red Hat:enterprise_linux:7::fastdatapath
From an advisory covering 3 CVEs
 before 0:2.9.9-1.el7fdp
0:2.9.9-1.el7fdp
openvswitch2.11
Red Hat:openstack:13::el7
From an advisory covering 2 CVEs
 before 0:2.11.3-86.el7fdp
0:2.11.3-86.el7fdp
openvswitch2.11-debuginfo
Red Hat:openstack:13::el7
From an advisory covering 2 CVEs
 before 0:2.11.3-86.el7fdp
0:2.11.3-86.el7fdp
openvswitch2.11-devel
Red Hat:openstack:13::el7
From an advisory covering 2 CVEs
 before 0:2.11.3-86.el7fdp
0:2.11.3-86.el7fdp
python-openvswitch2.11
Red Hat:openstack:13::el7
From an advisory covering 2 CVEs
 before 0:2.11.3-86.el7fdp
0:2.11.3-86.el7fdp
openvswitch2.11-test
Red Hat:openstack:13::el7
From an advisory covering 2 CVEs
 before 0:2.11.3-86.el7fdp
0:2.11.3-86.el7fdp
openvswitch
SUSE:Linux Enterprise Module for Package Hub 15 SP2
 before 2.13.2-9.14.1
2.13.2-9.14.1
openvswitch
SUSE:Linux Enterprise Module for Server Applications 15 SP2
 before 2.13.2-9.14.1
2.13.2-9.14.1
openvswitch
SUSE:Linux Enterprise Module for Package Hub 15 SP2
 before 2.11.5-3.15.3
2.11.5-3.15.3
openvswitch
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
 before 2.11.5-3.15.3
2.11.5-3.15.3
openvswitch
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 2.11.5-3.15.3
2.11.5-3.15.3
openvswitch
SUSE:Linux Enterprise Server 15 SP1-BCL
 before 2.11.5-3.15.3
2.11.5-3.15.3
openvswitch
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 2.11.5-3.15.3
2.11.5-3.15.3
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 2.11.5-3.15.3
2.11.5-3.15.3
openvswitch
SUSE:Manager Proxy 4.0
 before 2.11.5-3.15.3
2.11.5-3.15.3
openvswitch
SUSE:Manager Retail Branch Server 4.0
 before 2.11.5-3.15.3
2.11.5-3.15.3
openvswitch
SUSE:Manager Server 4.0
 before 2.11.5-3.15.3
2.11.5-3.15.3
openvswitch
SUSE:Enterprise Storage 6
 before 2.11.5-3.15.3
2.11.5-3.15.3
openvswitch
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
 before 2.11.5-6.33.3
2.11.5-6.33.3
openvswitch
SUSE:Linux Enterprise High Performance Computing 15-LTSS
 before 2.11.5-6.33.3
2.11.5-6.33.3
openvswitch
SUSE:Linux Enterprise Server 15-LTSS
 before 2.11.5-6.33.3
2.11.5-6.33.3
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 15
 before 2.11.5-6.33.3
2.11.5-6.33.3
openvswitch
SUSE:HPE Helion OpenStack 8
 before 2.7.12-3.39.1
2.7.12-3.39.1
openvswitch
SUSE:OpenStack Cloud 8
 before 2.7.12-3.39.1
2.7.12-3.39.1
openvswitch
SUSE:OpenStack Cloud Crowbar 8
 before 2.7.12-3.39.1
2.7.12-3.39.1
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 2.7.12-3.39.1
2.7.12-3.39.1
openvswitch
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 2.7.12-3.39.1
2.7.12-3.39.1
openvswitch
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 2.7.12-3.39.1
2.7.12-3.39.1
openvswitch
SUSE:Enterprise Storage 5
 before 2.7.12-3.39.1
2.7.12-3.39.1
openvswitch
SUSE:OpenStack Cloud 7
 before 2.5.11-25.29.1
2.5.11-25.29.1
openvswitch-dpdk
SUSE:OpenStack Cloud 7
 before 2.5.11-25.29.1
2.5.11-25.29.1
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 2.5.11-25.29.1
2.5.11-25.29.1
openvswitch-dpdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 2.5.11-25.29.1
2.5.11-25.29.1
openvswitch
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 2.5.11-25.29.1
2.5.11-25.29.1
openvswitch-dpdk
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 2.5.11-25.29.1
2.5.11-25.29.1
openvswitch
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 2.5.11-25.29.1
2.5.11-25.29.1
openvswitch-dpdk
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 2.5.11-25.29.1
2.5.11-25.29.1
openvswitch
SUSE:OpenStack Cloud 9
 before 2.8.10-4.26.1
2.8.10-4.26.1
openvswitch
SUSE:OpenStack Cloud Crowbar 9
 before 2.8.10-4.26.1
2.8.10-4.26.1
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 2.8.10-4.26.1
2.8.10-4.26.1
openvswitch
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 2.8.10-4.26.1
2.8.10-4.26.1
openvswitch
SUSE:Linux Enterprise Server 12 SP5
 before 2.11.5-3.9.1
2.11.5-3.9.1
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 2.11.5-3.9.1
2.11.5-3.9.1
openvswitch
Ubuntu:16.04:LTS
 before 2.5.9-0ubuntu0.16.04.3, plus listed versions
2.4.0-0ubuntu42.4.0-0ubuntu52.5.0~git20160129.46a88d9-0ubuntu12.5.0~git20160219.522aca6-0ubuntu12.5.0~git20160219.522aca6-0ubuntu2
Show 9 moreShow less
2.5.0~git20160219.522aca6-0ubuntu32.5.0-0ubuntu12.5.2-0ubuntu0.16.04.12.5.2-0ubuntu0.16.04.22.5.2-0ubuntu0.16.04.32.5.4-0ubuntu0.16.04.12.5.5-0ubuntu0.16.04.12.5.5-0ubuntu0.16.04.22.5.9-0ubuntu0.16.04.2
2.5.9-0ubuntu0.16.04.3
openvswitch
Ubuntu:18.04:LTS
 before 2.9.8-0ubuntu0.18.04.2, plus listed versions
2.8.0-0ubuntu22.8.1-0ubuntu22.8.1-0ubuntu32.9.0~git20180205.5a39582ca-0ubuntu12.9.0-0ubuntu1
Show 4 moreShow less
2.9.2-0ubuntu0.18.04.22.9.2-0ubuntu0.18.04.32.9.5-0ubuntu0.18.04.12.9.7-0ubuntu0.18.04.2
2.9.8-0ubuntu0.18.04.2
openvswitch
Ubuntu:20.04:LTS
 before 2.13.1-0ubuntu0.20.04.4, plus listed versions
2.12.0-0ubuntu12.12.0-0ubuntu22.12.1~git20191107.7accd1302-0ubuntu12.12.90~git20200107.af683565b-0ubuntu12.12.90~git20200107.af683565b-0ubuntu2
Show 7 moreShow less
2.12.90~git20200107.af683565b-0ubuntu32.13.0~git20200127.dbdf66c29-0ubuntu22.13.0~git20200212.15ae9db33-0ubuntu12.13.0~git20200212.15ae9db33-0ubuntu22.13.0-0ubuntu12.13.1-0ubuntu0.20.04.12.13.1-0ubuntu0.20.04.3
2.13.1-0ubuntu0.20.04.4
openvswitch
openSUSE:Leap 15.2
 before 2.13.2-lp152.3.12.1
2.13.2-lp152.3.12.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubfreddierice/cve-2020-35498-flag2021-02-12

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-35498 is a high vulnerability (CVSS 7.5) in Openvswitch, published February 10, 2021. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 8.03%, the 94th percentile. Fixed in openvswitch 2.12.3-r0.

References

Show 49 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open