{"id":"CVE-2021-36980","aliases":["ALPINE-CVE-2021-36980","AZL-6781","DEBIAN-CVE-2021-36980","EUVD-2021-23556","GHSA-ww48-mfpv-wc3r","OESA-2021-1304","RHBA-2021:1163","RHBA-2021:1166","RHBA-2021:2508","RHBA-2021:2509","RHBA-2022:8558","RHSA-2021:3758","RHSA-2021:3942","SUSE-SU-2022:3096-1","SUSE-SU-2022:3098-1","SUSE-SU-2022:3099-1","SUSE-SU-2022:3116-1","SUSE-SU-2023:1795-1","SUSE-SU-2023:2360-1","UBUNTU-CVE-2021-36980","USN-5065-1","openSUSE-SU-2024:11898-1"],"status":"published","title":"Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in...","description":"Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.0118,"percentile":0.68115,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2021-07-20T00:00:00Z","modified":"2026-11-03T06:32:39Z","fixes":[{"ecosystem":"Alpine:v3.14","package":"openvswitch","fixed_in":["2.12.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openvswitch","fixed_in":["2.12.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openvswitch","fixed_in":["2.12.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openvswitch","fixed_in":["2.12.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openvswitch","fixed_in":["2.12.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openvswitch","fixed_in":["2.12.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openvswitch","fixed_in":["2.12.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openvswitch","fixed_in":["2.12.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openvswitch","fixed_in":["2.12.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openvswitch","fixed_in":["2.12.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openvswitch","fixed_in":["2.12.3-r2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"openvswitch","fixed_in":["2.17.0-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openvswitch","fixed_in":["2.15.0+ds1-10"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openvswitch","fixed_in":["2.15.0+ds1-10"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openvswitch","fixed_in":["2.15.0+ds1-10"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"openvswitch","fixed_in":["2.12.0-12.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"openvswitch","fixed_in":["2.12.0-12.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"network-scripts-openvswitch2.11","fixed_in":["0:2.11.3-86.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.11","fixed_in":["0:2.11.3-86.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.11-debuginfo","fixed_in":["0:2.11.3-86.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.11-debugsource","fixed_in":["0:2.11.3-86.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.11-devel","fixed_in":["0:2.11.3-86.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.11-test","fixed_in":["0:2.11.3-86.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.11","fixed_in":["0:2.11.3-86.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.11-debuginfo","fixed_in":["0:2.11.3-86.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch2.11","fixed_in":["0:2.11.3-89.el7fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch2.11-debuginfo","fixed_in":["0:2.11.3-89.el7fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch2.11-devel","fixed_in":["0:2.11.3-89.el7fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch2.11-test","fixed_in":["0:2.11.3-89.el7fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"python-openvswitch2.11","fixed_in":["0:2.11.3-89.el7fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"network-scripts-openvswitch2.13","fixed_in":["0:2.13.0-114.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13","fixed_in":["0:2.13.0-114.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-debuginfo","fixed_in":["0:2.13.0-114.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-debugsource","fixed_in":["0:2.13.0-114.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-devel","fixed_in":["0:2.13.0-114.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-ipsec","fixed_in":["0:2.13.0-114.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-test","fixed_in":["0:2.13.0-114.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.13","fixed_in":["0:2.13.0-114.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.13-debuginfo","fixed_in":["0:2.13.0-114.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"network-scripts-openvswitch2.15","fixed_in":["0:2.15.0-24.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.15","fixed_in":["0:2.15.0-24.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.15-debuginfo","fixed_in":["0:2.15.0-24.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.15-debugsource","fixed_in":["0:2.15.0-24.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.15-devel","fixed_in":["0:2.15.0-24.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.15-ipsec","fixed_in":["0:2.15.0-24.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.15-test","fixed_in":["0:2.15.0-24.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.15","fixed_in":["0:2.15.0-24.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.15-debuginfo","fixed_in":["0:2.15.0-24.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch2.13","fixed_in":["0:2.13.0-102.el7fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch2.13-debuginfo","fixed_in":["0:2.13.0-102.el7fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch2.13-devel","fixed_in":["0:2.13.0-102.el7fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch2.13-ipsec","fixed_in":["0:2.13.0-102.el7fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch2.13-test","fixed_in":["0:2.13.0-102.el7fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"python3-openvswitch2.13","fixed_in":["0:2.13.0-102.el7fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"openvswitch2.11","fixed_in":["0:2.11.3-89.el7fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"openvswitch2.11-debuginfo","fixed_in":["0:2.11.3-89.el7fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"openvswitch2.11-devel","fixed_in":["0:2.11.3-89.el7fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"python-openvswitch2.11","fixed_in":["0:2.11.3-89.el7fdp"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"openvswitch","fixed_in":["2.13.2-150200.9.17.1","2.14.2-150300.19.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"openvswitch","fixed_in":["2.13.2-150200.9.17.1","2.14.2-150400.24.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openvswitch","fixed_in":["2.11.5-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openvswitch","fixed_in":["2.11.5-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"openvswitch","fixed_in":["2.14.2-150400.24.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"openvswitch","fixed_in":["2.14.2-150400.24.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"openvswitch","fixed_in":["2.14.2-150300.19.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"openvswitch","fixed_in":["2.14.2-150300.19.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openvswitch","fixed_in":["2.13.3-0ubuntu0.20.04.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"openvswitch","fixed_in":["2.17.0-12.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.14","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.11.0"},{"fixed":"2.12.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.11.0"},{"fixed":"2.12.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.11.0"},{"fixed":"2.12.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.11.0"},{"fixed":"2.12.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.11.0"},{"fixed":"2.12.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.11.0"},{"fixed":"2.12.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.11.0"},{"fixed":"2.12.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.11.0"},{"fixed":"2.12.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.11.0"},{"fixed":"2.12.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.11.0"},{"fixed":"2.12.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.11.0"},{"fixed":"2.12.3-r2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0+ds1-10"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0+ds1-10"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0+ds1-10"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.0-12.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.0-12.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"network-scripts-openvswitch2.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.3-86.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.3-86.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.3-86.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.11-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.3-86.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.3-86.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.11-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.3-86.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.3-86.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.3-86.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch2.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.3-89.el7fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch2.11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.3-89.el7fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch2.11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.3-89.el7fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch2.11-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.3-89.el7fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"python-openvswitch2.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.3-89.el7fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"network-scripts-openvswitch2.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-114.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-114.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-114.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-114.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-114.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-ipsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-114.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-114.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-114.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.13-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-114.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"network-scripts-openvswitch2.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-24.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-24.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.15-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-24.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.15-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-24.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.15-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-24.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.15-ipsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-24.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.15-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-24.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-24.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.15-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-24.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch2.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-102.el7fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch2.13-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-102.el7fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch2.13-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-102.el7fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch2.13-ipsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-102.el7fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch2.13-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-102.el7fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"python3-openvswitch2.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-102.el7fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"coreos-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.rhaos4.9.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"coreos-installer-bootinfra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.rhaos4.9.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"coreos-installer-bootinfra-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.rhaos4.9.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"coreos-installer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.rhaos4.9.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"coreos-installer-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.rhaos4.9.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.289.3.1630554997-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-202110080828.p0.git.894a78b.assembly.stream.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-202110080828.p0.git.894a78b.assembly.stream.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-202110080828.p0.git.894a78b.assembly.stream.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-202110080828.p0.git.894a78b.assembly.stream.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"network-scripts-openvswitch2.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-28.el8fdp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"openvswitch2.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-28.el8fdp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"openvswitch2.15-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-28.el8fdp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"openvswitch2.15-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-28.el8fdp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"openvswitch2.15-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-28.el8fdp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"openvswitch2.15-ipsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-28.el8fdp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"openvswitch2.15-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-28.el8fdp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"python3-openvswitch2.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-28.el8fdp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"python3-openvswitch2.15-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-28.el8fdp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"openvswitch2.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.3-89.el7fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"openvswitch2.11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.3-89.el7fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"openvswitch2.11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.3-89.el7fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"python-openvswitch2.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.3-89.el7fdp"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.2-150200.9.17.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.2-150200.9.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.5-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.5-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150400.24.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150400.24.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150400.24.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150300.19.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150300.19.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150300.19.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.9-150100.4.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.5-150100.3.18.2"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.9-150100.4.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.5-150100.3.18.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.10-4.33.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.10-4.33.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.10-4.33.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-ESPOS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.10-4.33.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.10-4.33.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.3-0ubuntu0.20.04.2"}]}],"versions":["2.12.0-0ubuntu1","2.12.0-0ubuntu2","2.12.1~git20191107.7accd1302-0ubuntu1","2.12.90~git20200107.af683565b-0ubuntu1","2.12.90~git20200107.af683565b-0ubuntu2","2.12.90~git20200107.af683565b-0ubuntu3","2.13.0~git20200127.dbdf66c29-0ubuntu2","2.13.0~git20200212.15ae9db33-0ubuntu1","2.13.0~git20200212.15ae9db33-0ubuntu2","2.13.0-0ubuntu1","2.13.1-0ubuntu0.20.04.1","2.13.1-0ubuntu0.20.04.3","2.13.1-0ubuntu0.20.04.4","2.13.3-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.3-0ubuntu0.20.04.2"}]}],"versions":["2.12.0-0ubuntu1","2.12.0-0ubuntu2","2.12.1~git20191107.7accd1302-0ubuntu1","2.12.90~git20200107.af683565b-0ubuntu1","2.12.90~git20200107.af683565b-0ubuntu2","2.12.90~git20200107.af683565b-0ubuntu3","2.13.0~git20200127.dbdf66c29-0ubuntu2","2.13.0~git20200212.15ae9db33-0ubuntu1","2.13.0~git20200212.15ae9db33-0ubuntu2","2.13.0-0ubuntu1","2.13.1-0ubuntu0.20.04.1","2.13.1-0ubuntu0.20.04.3","2.13.1-0ubuntu0.20.04.4","2.13.3-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-12.1"}]}]}],"products":[{"vendor":"openvswitch","product":"openvswitch"}],"references":[{"url":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/openvswitch/OSV-2020-2197.yaml","tags":["x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27851","tags":["x_transferred","Patch","Third Party Advisory","fix","article"]},{"url":"https://github.com/openvswitch/ovs/commit/77cccc74deede443e8b9102299efc869a52b65b2","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/openvswitch/ovs/commit/38744b1bcb022c611712527f039722115300f58f","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/openvswitch/ovs/commit/65c61b0c23a0d474696d7b1cea522a5016a8aeb3","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/openvswitch/ovs/commit/6d67310f4d2524b466b98f05ebccc1add1e8cf35","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/openvswitch/ovs/commit/8ce8dc34b5f73b30ce0c1869af9947013c3c6575","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/openvswitch/ovs/commit/9926637a80d0d243dbf9c49761046895e9d1a8e2","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://security.gentoo.org/glsa/202311-16","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-36980","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-ww48-mfpv-wc3r"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-36980","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-36980","tags":["advisory"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1304","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2021:1163","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1940249","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhba-2021_1163.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-36980","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1984473","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-36980","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHBA-2021:1166","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1940248","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhba-2021_1166.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2021:2508","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964573","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964582","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhba-2021_2508.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2021:2509","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1960391","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964683","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970832","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhba-2021_2509.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2022:8558","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1991650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1991672","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhba-2022_8558.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3758","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1971016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974891","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3758.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2018478","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3917","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3917","tags":["advisory"]},{"url":"https://github.com/coreos/coreos-installer/commit/2a36405339c87b16ed6c76e91ad5b76638fbdb0c","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-28169","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-28169","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-28169","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33196","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33196","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33196","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/RgCMkAEQjSI","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-34428","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-34428","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-34428","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-m6cp-vxjx-65j6","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3942","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3942.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223096-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1188524","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-36980","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223098-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223099-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223116-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231795-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1203865","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32166","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232360-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1206580","tags":["report"]},{"url":"https://bugzilla.suse.com/1206581","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-4337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-4338","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-36980","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5065-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-36980","description":"Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.","status":"published","published":"2021-07-20T00:00:00Z","modified":"2025-05-05T16:46:44.736Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:33:06.32268Z"}],"euvd":[{"id":"EUVD-2021-23556","description":"Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.","status":"published","published":"2021-07-20T00:00:00Z","modified":"2025-05-05T16:46:44Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T20:32:56.053822Z"}],"ghsa":[{"id":"GHSA-ww48-mfpv-wc3r","title":"Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in...","description":"Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.","status":"published","published":"2022-05-24T19:08:28Z","modified":"2023-11-26T12:30:23Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:55:06.860566Z"}],"nvd":[{"id":"CVE-2021-36980","description":"Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.","status":"published","published":"2021-07-20T07:15:08.113Z","modified":"2026-06-17T03:59:45.86Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:06:56.185362Z"}],"osv":[{"id":"ALPINE-CVE-2021-36980","description":"Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.","status":"published","published":"2021-07-20T07:15:08.113Z","modified":"2026-11-03T06:32:39.351965268Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:17:20.312441Z"},{"id":"AZL-6781","title":"CVE-2021-36980 affecting package openvswitch for versions less than 2.17.0-1","description":"Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.","status":"published","published":"2021-07-20T07:15:08Z","modified":"2026-04-21T04:38:16.220867Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:08.630357Z"},{"id":"CVE-2021-36980","description":"Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.","status":"published","published":"2021-07-20T07:15:08.113Z","modified":"2026-10-20T14:04:50.70042444Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:20.434873Z"},{"id":"DEBIAN-CVE-2021-36980","description":"Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.","status":"published","published":"2021-07-20T07:15:08.113Z","modified":"2026-10-23T18:03:49.795690122Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:35.233346Z"},{"id":"OESA-2021-1304","title":"openvswitch security update","description":"Open vSwitch is a production quality, multilayer virtual switch licensed under the open source Apache 2.0 license.\r\n\r\nSecurity Fix(es):\r\n\r\nOpen vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.(CVE-2021-36980)","status":"published","published":"2021-08-06T11:04:32Z","modified":"2026-08-18T01:15:32.474449712Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHBA-2021:1163","title":"Red Hat Bug Fix Advisory: openvswitch2.11 bug fix and enhancement update","status":"published","published":"2024-09-13T17:26:53Z","modified":"2026-06-29T10:33:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHBA-2021:1166","title":"Red Hat Bug Fix Advisory: openvswitch2.11 bug fix and enhancement update","status":"published","published":"2024-09-13T17:26:59Z","modified":"2026-06-29T10:33:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHBA-2021:2508","title":"Red Hat Bug Fix Advisory: openvswitch2.13 bug fix and enhancement update","status":"published","published":"2024-09-13T17:26:13Z","modified":"2026-06-29T10:33:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHBA-2021:2509","title":"Red Hat Bug Fix Advisory: openvswitch2.15 bug fix and enhancement update","status":"published","published":"2024-09-13T17:26:06Z","modified":"2026-06-29T10:33:31Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHBA-2022:8558","title":"Red Hat Bug Fix Advisory: openvswitch2.13 bug fix and enhancement update","status":"published","published":"2024-09-13T17:26:37Z","modified":"2026-06-29T10:39:03Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2021:3758","title":"Red Hat Security Advisory: OpenShift Container Platform 4.9.0 packages and security update","status":"published","published":"2024-09-30T14:17:53Z","modified":"2026-10-13T10:02:35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3942","title":"Red Hat Security Advisory: openvswitch2.11 security update","status":"published","published":"2024-09-13T17:28:33Z","modified":"2026-06-29T10:37:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"UBUNTU-CVE-2021-36980","description":"Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.","status":"published","published":"2021-07-20T07:15:00Z","modified":"2026-02-04T02:33:45.360786Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:27.870979Z"},{"id":"openSUSE-SU-2024:11898-1","title":"libopenvswitch-2_17-0-2.17.0-12.1 on GA media","description":"These are all security issues fixed in the libopenvswitch-2_17-0-2.17.0-12.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:16:49.1473Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:3096-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n- CVE-2021-36980: Fixed a use-after-free issue during the decoding of\n  a RAW_ENCAP action (bsc#1188524).\n","status":"published","published":"2022-09-06T05:54:06Z","modified":"2026-02-04T04:31:46.085989Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:3098-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n- CVE-2021-36980: Fixed a use-after-free issue during the decoding of\n  a RAW_ENCAP action (bsc#1188524).\n","status":"published","published":"2022-09-06T07:34:21Z","modified":"2026-02-04T03:41:58.411496Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:3099-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n- CVE-2021-36980: Fixed a use-after-free issue during the decoding of\n  a RAW_ENCAP action (bsc#1188524).\n","status":"published","published":"2022-09-06T07:34:48Z","modified":"2026-02-04T04:28:12.868331Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:3116-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n- CVE-2021-36980: Fixed a use-after-free issue during the decoding of\n  a RAW_ENCAP action (bsc#1188524).\n","status":"published","published":"2022-09-06T12:36:34Z","modified":"2025-05-02T04:31:41.609065Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2023:1795-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n- CVE-2021-36980: Fixed a use-after-free issue during the decoding of\n  a RAW_ENCAP action (bsc#1188524).\n- CVE-2022-32166: Fixed a out of bounds read in minimask_equal() (bsc#1203865).\n","status":"published","published":"2023-04-07T09:06:37Z","modified":"2026-02-04T02:25:36.047316Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:2360-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n- CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).\n- CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).\n- CVE-2022-32166: Fixed a out of bounds read in minimask_equal() (bsc#1203865).\n- CVE-2021-36980: Fixed a use-after-free issue during the decoding of a RAW_ENCAP action (bsc#1188524).\n","status":"published","published":"2023-06-02T11:37:50Z","modified":"2026-02-04T02:29:47.962551Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"USN-5065-1","title":"openvswitch vulnerability","description":"It was discovered that Open vSwitch incorrectly handled decoding RAW_ENCAP\nactions. A remote attacker could use this issue to cause Open vSwitch to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode.\n","status":"published","published":"2021-09-08T11:21:53Z","modified":"2026-02-10T04:42:18Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}