{"id":"CVE-2025-0650","aliases":["DEBIAN-CVE-2025-0650","EUVD-2025-1804","GHSA-gmx5-xv9g-ph7f","RHSA-2025:1083","RHSA-2025:1084","RHSA-2025:1085","RHSA-2025:1086","RHSA-2025:1087","RHSA-2025:1088","RHSA-2025:1089","RHSA-2025:1090","RHSA-2025:1091","RHSA-2025:1092","RHSA-2025:1093","RHSA-2025:1094","RHSA-2025:1095","RHSA-2025:1096","RHSA-2025:1097","SUSE-SU-2025:0561-1","SUSE-SU-2025:0578-1","SUSE-SU-2025:0583-1","SUSE-SU-2025:0742-1","SUSE-SU-2026:0280-1","SUSE-SU-2026:0290-1","SUSE-SU-2026:20049-1","SUSE-SU-2026:20061-1","SUSE-SU-2026:23188-1","UBUNTU-CVE-2025-0650","USN-7396-1","openSUSE-SU-2025:14757-1"],"status":"published","title":"Ovn: egress acls may be bypassed via specially crafted udp packet","description":"A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00865,"percentile":0.58899,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-284"],"published":"2025-01-23T16:34:31Z","modified":"2026-10-24T18:00:05Z","fixes":[{"ecosystem":"Debian:13","package":"ovn","fixed_in":["25.03.0~git20250216.7c69af7-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.03","fixed_in":["0:22.03.7-11.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.03-central","fixed_in":["0:22.03.7-11.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.03-central-debuginfo","fixed_in":["0:22.03.7-11.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.03-debuginfo","fixed_in":["0:22.03.7-11.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.03-debugsource","fixed_in":["0:22.03.7-11.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.03-host","fixed_in":["0:22.03.7-11.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.03-host-debuginfo","fixed_in":["0:22.03.7-11.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.03-vtep","fixed_in":["0:22.03.7-11.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.03-vtep-debuginfo","fixed_in":["0:22.03.7-11.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.06","fixed_in":["0:22.06.0-273.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.06-central","fixed_in":["0:22.06.0-273.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.06-central-debuginfo","fixed_in":["0:22.06.0-273.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.06-debuginfo","fixed_in":["0:22.06.0-273.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.06-debugsource","fixed_in":["0:22.06.0-273.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.06-host","fixed_in":["0:22.06.0-273.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.06-host-debuginfo","fixed_in":["0:22.06.0-273.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.06-vtep","fixed_in":["0:22.06.0-273.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.06-vtep-debuginfo","fixed_in":["0:22.06.0-273.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.09","fixed_in":["0:22.09.2-86.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.09-central","fixed_in":["0:22.09.2-86.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.09-central-debuginfo","fixed_in":["0:22.09.2-86.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.09-debuginfo","fixed_in":["0:22.09.2-86.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.09-debugsource","fixed_in":["0:22.09.2-86.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.09-host","fixed_in":["0:22.09.2-86.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.09-host-debuginfo","fixed_in":["0:22.09.2-86.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.09-vtep","fixed_in":["0:22.09.2-86.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.09-vtep-debuginfo","fixed_in":["0:22.09.2-86.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.12","fixed_in":["0:22.12.1-107.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.12-central","fixed_in":["0:22.12.1-107.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.12-central-debuginfo","fixed_in":["0:22.12.1-107.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.12-debuginfo","fixed_in":["0:22.12.1-107.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.12-debugsource","fixed_in":["0:22.12.1-107.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.12-host","fixed_in":["0:22.12.1-107.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.12-host-debuginfo","fixed_in":["0:22.12.1-107.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.12-vtep","fixed_in":["0:22.12.1-107.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.12-vtep-debuginfo","fixed_in":["0:22.12.1-107.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.03","fixed_in":["0:23.03.3-22.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.03-central","fixed_in":["0:23.03.3-22.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.03-central-debuginfo","fixed_in":["0:23.03.3-22.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.03-debuginfo","fixed_in":["0:23.03.3-22.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.03-debugsource","fixed_in":["0:23.03.3-22.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.03-host","fixed_in":["0:23.03.3-22.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.03-host-debuginfo","fixed_in":["0:23.03.3-22.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.03-vtep","fixed_in":["0:23.03.3-22.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.03-vtep-debuginfo","fixed_in":["0:23.03.3-22.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.06","fixed_in":["0:23.06.4-26.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.06-central","fixed_in":["0:23.06.4-26.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.06-central-debuginfo","fixed_in":["0:23.06.4-26.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.06-debuginfo","fixed_in":["0:23.06.4-26.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.06-debugsource","fixed_in":["0:23.06.4-26.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.06-host","fixed_in":["0:23.06.4-26.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.06-host-debuginfo","fixed_in":["0:23.06.4-26.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.06-vtep","fixed_in":["0:23.06.4-26.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.06-vtep-debuginfo","fixed_in":["0:23.06.4-26.el8fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.03","fixed_in":["0:22.03.7-11.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.03-central","fixed_in":["0:22.03.7-11.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.03-central-debuginfo","fixed_in":["0:22.03.7-11.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.03-debuginfo","fixed_in":["0:22.03.7-11.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.03-debugsource","fixed_in":["0:22.03.7-11.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.03-host","fixed_in":["0:22.03.7-11.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.03-host-debuginfo","fixed_in":["0:22.03.7-11.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.03-vtep","fixed_in":["0:22.03.7-11.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.03-vtep-debuginfo","fixed_in":["0:22.03.7-11.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.06","fixed_in":["0:22.06.0-273.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.06-central","fixed_in":["0:22.06.0-273.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.06-central-debuginfo","fixed_in":["0:22.06.0-273.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.06-debuginfo","fixed_in":["0:22.06.0-273.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.06-debugsource","fixed_in":["0:22.06.0-273.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.06-host","fixed_in":["0:22.06.0-273.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.06-host-debuginfo","fixed_in":["0:22.06.0-273.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.06-vtep","fixed_in":["0:22.06.0-273.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.06-vtep-debuginfo","fixed_in":["0:22.06.0-273.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.09","fixed_in":["0:22.09.2-86.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.09-central","fixed_in":["0:22.09.2-86.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.09-central-debuginfo","fixed_in":["0:22.09.2-86.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.09-debuginfo","fixed_in":["0:22.09.2-86.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.09-debugsource","fixed_in":["0:22.09.2-86.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.09-host","fixed_in":["0:22.09.2-86.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.09-host-debuginfo","fixed_in":["0:22.09.2-86.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.09-vtep","fixed_in":["0:22.09.2-86.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.09-vtep-debuginfo","fixed_in":["0:22.09.2-86.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.12","fixed_in":["0:22.12.1-107.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.12-central","fixed_in":["0:22.12.1-107.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.12-central-debuginfo","fixed_in":["0:22.12.1-107.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.12-debuginfo","fixed_in":["0:22.12.1-107.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.12-debugsource","fixed_in":["0:22.12.1-107.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.12-host","fixed_in":["0:22.12.1-107.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.12-host-debuginfo","fixed_in":["0:22.12.1-107.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.12-vtep","fixed_in":["0:22.12.1-107.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.12-vtep-debuginfo","fixed_in":["0:22.12.1-107.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.03","fixed_in":["0:23.03.3-22.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.03-central","fixed_in":["0:23.03.3-22.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.03-central-debuginfo","fixed_in":["0:23.03.3-22.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.03-debuginfo","fixed_in":["0:23.03.3-22.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.03-debugsource","fixed_in":["0:23.03.3-22.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.03-host","fixed_in":["0:23.03.3-22.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.03-host-debuginfo","fixed_in":["0:23.03.3-22.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.03-vtep","fixed_in":["0:23.03.3-22.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.03-vtep-debuginfo","fixed_in":["0:23.03.3-22.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.06","fixed_in":["0:23.06.4-26.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.06-central","fixed_in":["0:23.06.4-26.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.06-central-debuginfo","fixed_in":["0:23.06.4-26.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.06-debuginfo","fixed_in":["0:23.06.4-26.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.06-debugsource","fixed_in":["0:23.06.4-26.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.06-host","fixed_in":["0:23.06.4-26.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.06-host-debuginfo","fixed_in":["0:23.06.4-26.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.06-vtep","fixed_in":["0:23.06.4-26.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.06-vtep-debuginfo","fixed_in":["0:23.06.4-26.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.09","fixed_in":["0:23.09.6-12.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.09-central","fixed_in":["0:23.09.6-12.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.09-central-debuginfo","fixed_in":["0:23.09.6-12.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.09-debuginfo","fixed_in":["0:23.09.6-12.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.09-debugsource","fixed_in":["0:23.09.6-12.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.09-host","fixed_in":["0:23.09.6-12.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.09-host-debuginfo","fixed_in":["0:23.09.6-12.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.09-vtep","fixed_in":["0:23.09.6-12.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.09-vtep-debuginfo","fixed_in":["0:23.09.6-12.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.03","fixed_in":["0:24.03.4-53.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.03-central","fixed_in":["0:24.03.4-53.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.03-central-debuginfo","fixed_in":["0:24.03.4-53.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.03-debuginfo","fixed_in":["0:24.03.4-53.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.03-debugsource","fixed_in":["0:24.03.4-53.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.03-host","fixed_in":["0:24.03.4-53.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.03-host-debuginfo","fixed_in":["0:24.03.4-53.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.03-vtep","fixed_in":["0:24.03.4-53.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.03-vtep-debuginfo","fixed_in":["0:24.03.4-53.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.09","fixed_in":["0:24.09.1-66.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.09-central","fixed_in":["0:24.09.1-66.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.09-central-debuginfo","fixed_in":["0:24.09.1-66.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.09-debuginfo","fixed_in":["0:24.09.1-66.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.09-debugsource","fixed_in":["0:24.09.1-66.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.09-host","fixed_in":["0:24.09.1-66.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.09-host-debuginfo","fixed_in":["0:24.09.1-66.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.09-vtep","fixed_in":["0:24.09.1-66.el9fdp"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.09-vtep-debuginfo","fixed_in":["0:24.09.1-66.el9fdp"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"openvswitch","fixed_in":["2.11.5-3.24.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"openvswitch","fixed_in":["2.11.5-3.24.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"openvswitch","fixed_in":["2.14.2-150400.24.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"openvswitch","fixed_in":["2.14.2-150400.24.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"openvswitch","fixed_in":["2.14.2-150400.24.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"openvswitch","fixed_in":["2.14.2-150400.24.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"openvswitch","fixed_in":["2.14.2-150400.24.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"openvswitch","fixed_in":["2.14.2-150400.24.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"openvswitch","fixed_in":["2.14.2-150400.24.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"openvswitch","fixed_in":["2.14.2-150400.24.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"openvswitch","fixed_in":["3.1.0-150600.33.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"openvswitch","fixed_in":["3.1.0-150600.33.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"openvswitch","fixed_in":["3.1.0-150600.33.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"openvswitch3","fixed_in":["3.1.0-150500.3.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"openvswitch3","fixed_in":["3.1.0-150500.3.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"openvswitch3","fixed_in":["3.1.0-150500.3.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"openvswitch3","fixed_in":["3.1.0-150500.3.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"openvswitch3","fixed_in":["3.1.0-150500.3.22.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"openvswitch3","fixed_in":["3.1.0-150500.3.22.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"ovn","fixed_in":["20.03.2-0ubuntu0.20.04.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"ovn","fixed_in":["22.03.3-0ubuntu0.22.04.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"ovn","fixed_in":["24.03.2-0ubuntu0.24.04.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"openvswitch","fixed_in":["3.3.2-25.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"ovn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["23.03.0-1","23.03.0-2","23.03.0-3","23.03.1-1~deb12u1","23.03.1-1~deb12u2","23.09.0-1","23.09.0-2","24.03.0-1","24.03.0~git20240205.ebb7076-1","24.03.1-1","24.03.1-2","24.03.2-1","24.03.2-2","24.09.0-1","25.03.0-1","25.03.0~git20250216.7c69af7-1","25.03.0~git20250216.7c69af7-2","25.09.0-1","25.09.0-2","25.09.0-3","26.03.0-1","26.03.0-2","26.03.0-3","26.03.0-4","26.03.0-5","26.03.0-6","26.03.0~git20260216.b543a88-1","26.03.0~git20260216.b543a88-2","26.03.0~git20260216.b543a88-3","26.03.0~git20260216.b543a88-4","26.03.1-1","26.03.2-1","26.09.0-1","26.09.0~git20260819.c60a7af-1"]},{"source":"osv","ecosystem":"Debian:13","package":"ovn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.03.0~git20250216.7c69af7-1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.03","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.03.7-11.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.03-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.03.7-11.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.03-central-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.03.7-11.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.03-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.03.7-11.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.03-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.03.7-11.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.03-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.03.7-11.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.03-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.03.7-11.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.03-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.03.7-11.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.03-vtep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.03.7-11.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.06","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.06.0-273.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.06-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.06.0-273.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.06-central-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.06.0-273.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.06-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.06.0-273.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.06-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.06.0-273.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.06-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.06.0-273.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.06-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.06.0-273.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.06-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.06.0-273.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.06-vtep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.06.0-273.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.09","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.09.2-86.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.09-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.09.2-86.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.09-central-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.09.2-86.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.09-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.09.2-86.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.09-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.09.2-86.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.09-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.09.2-86.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.09-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.09.2-86.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.09-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.09.2-86.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.09-vtep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.09.2-86.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.12.1-107.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.12-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.12.1-107.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.12-central-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.12.1-107.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.12-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.12.1-107.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.12-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.12.1-107.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.12-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.12.1-107.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.12-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.12.1-107.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.12-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.12.1-107.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn22.12-vtep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.12.1-107.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.03","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.03.3-22.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.03-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.03.3-22.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.03-central-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.03.3-22.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.03-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.03.3-22.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.03-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.03.3-22.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.03-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.03.3-22.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.03-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.03.3-22.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.03-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.03.3-22.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.03-vtep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.03.3-22.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.06","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.06.4-26.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.06-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.06.4-26.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.06-central-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.06.4-26.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.06-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.06.4-26.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.06-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.06.4-26.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.06-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.06.4-26.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.06-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.06.4-26.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.06-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.06.4-26.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"ovn23.06-vtep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.06.4-26.el8fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.03","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.03.7-11.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.03-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.03.7-11.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.03-central-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.03.7-11.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.03-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.03.7-11.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.03-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.03.7-11.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.03-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.03.7-11.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.03-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.03.7-11.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.03-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.03.7-11.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.03-vtep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.03.7-11.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.06","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.06.0-273.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.06-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.06.0-273.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.06-central-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.06.0-273.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.06-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.06.0-273.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.06-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.06.0-273.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.06-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.06.0-273.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.06-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.06.0-273.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.06-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.06.0-273.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.06-vtep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.06.0-273.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.09","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.09.2-86.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.09-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.09.2-86.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.09-central-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.09.2-86.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.09-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.09.2-86.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.09-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.09.2-86.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.09-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.09.2-86.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.09-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.09.2-86.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.09-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.09.2-86.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.09-vtep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.09.2-86.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.12.1-107.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.12-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.12.1-107.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.12-central-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.12.1-107.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.12-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.12.1-107.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.12-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.12.1-107.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.12-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.12.1-107.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.12-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.12.1-107.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.12-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.12.1-107.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn22.12-vtep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.12.1-107.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.03","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.03.3-22.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.03-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.03.3-22.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.03-central-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.03.3-22.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.03-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.03.3-22.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.03-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.03.3-22.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.03-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.03.3-22.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.03-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.03.3-22.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.03-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.03.3-22.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.03-vtep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.03.3-22.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.06","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.06.4-26.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.06-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.06.4-26.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.06-central-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.06.4-26.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.06-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.06.4-26.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.06-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.06.4-26.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.06-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.06.4-26.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.06-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.06.4-26.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.06-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.06.4-26.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.06-vtep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.06.4-26.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.09","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.09.6-12.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.09-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.09.6-12.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.09-central-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.09.6-12.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.09-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.09.6-12.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.09-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.09.6-12.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.09-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.09.6-12.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.09-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.09.6-12.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.09-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.09.6-12.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn23.09-vtep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.09.6-12.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.03","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.03.4-53.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.03-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.03.4-53.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.03-central-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.03.4-53.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.03-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.03.4-53.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.03-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.03.4-53.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.03-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.03.4-53.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.03-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.03.4-53.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.03-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.03.4-53.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.03-vtep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.03.4-53.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.09","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.09.1-66.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.09-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.09.1-66.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.09-central-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.09.1-66.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.09-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.09.1-66.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.09-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.09.1-66.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.09-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.09.1-66.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.09-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.09.1-66.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.09-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.09.1-66.el9fdp"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::fastdatapath","package":"ovn24.09-vtep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.09.1-66.el9fdp"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.5-3.24.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.5-3.24.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150400.24.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150400.24.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150400.24.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150400.24.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150400.24.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150400.24.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150400.24.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-150400.24.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-150600.33.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-150600.33.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-150600.33.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"openvswitch3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-150500.3.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"openvswitch3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-150500.3.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"openvswitch3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-150500.3.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"openvswitch3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-150500.3.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"openvswitch3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-150500.3.22.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"openvswitch3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-150500.3.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.7-150600.33.9.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.7-150600.33.9.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.7-150600.33.9.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"openvswitch3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.7-150500.3.25.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"openvswitch3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.7-150500.3.25.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"openvswitch3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.7-150500.3.25.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"openvswitch3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.7-150500.3.25.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"openvswitch3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.7-150500.3.25.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"openvswitch3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.7-150500.3.25.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.7-4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.7-slfo.1.1_2.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.7-slfo.1.1_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ovn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.03.2-0ubuntu0.20.04.6"}]}],"versions":["2.12.90~git20200107.c80e014d4-0ubuntu1","2.12.90~git20200107.c80e014d4-0ubuntu2","20.03.0~git20200212.9a4e68ec8-0ubuntu1","20.03.0~git20200212.9a4e68ec8-0ubuntu3","20.03.0-0ubuntu1","20.03.1-0ubuntu1","20.03.1-0ubuntu1.1","20.03.1-0ubuntu1.2","20.03.2-0ubuntu0.20.04.1","20.03.2-0ubuntu0.20.04.2","20.03.2-0ubuntu0.20.04.3","20.03.2-0ubuntu0.20.04.4","20.03.2-0ubuntu0.20.04.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ovn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.03.3-0ubuntu0.22.04.5"}]}],"versions":["21.09.0~git20210922.6549e5842-0ubuntu1","21.09.0~git20210922.6549e5842-0ubuntu2","21.09.0-0ubuntu2","21.12.0-0ubuntu1","22.03.0~git20220218.ed81be7-0ubuntu1","22.03.0-0ubuntu1","22.03.2-0ubuntu0.22.04.1","22.03.3-0ubuntu0.22.04.1","22.03.3-0ubuntu0.22.04.2","22.03.3-0ubuntu0.22.04.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ovn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.2-0ubuntu0.24.04.2"}]}],"versions":["23.09.0-1","23.09.0-2","24.03.0~git20240205.ebb7076-1","24.03.1-2ubuntu1","24.03.1-2ubuntu3","24.03.2-0ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ovn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.03.2-0ubuntu0.20.04.6"}]}],"versions":["2.12.90~git20200107.c80e014d4-0ubuntu1","2.12.90~git20200107.c80e014d4-0ubuntu2","20.03.0~git20200212.9a4e68ec8-0ubuntu1","20.03.0~git20200212.9a4e68ec8-0ubuntu3","20.03.0-0ubuntu1","20.03.1-0ubuntu1","20.03.1-0ubuntu1.1","20.03.1-0ubuntu1.2","20.03.2-0ubuntu0.20.04.1","20.03.2-0ubuntu0.20.04.2","20.03.2-0ubuntu0.20.04.3","20.03.2-0ubuntu0.20.04.4","20.03.2-0ubuntu0.20.04.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ovn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.03.3-0ubuntu0.22.04.5"}]}],"versions":["21.09.0~git20210922.6549e5842-0ubuntu1","21.09.0~git20210922.6549e5842-0ubuntu2","21.09.0-0ubuntu2","21.12.0-0ubuntu1","22.03.0~git20220218.ed81be7-0ubuntu1","22.03.0-0ubuntu1","22.03.2-0ubuntu0.22.04.1","22.03.3-0ubuntu0.22.04.1","22.03.3-0ubuntu0.22.04.2","22.03.3-0ubuntu0.22.04.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ovn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.2-0ubuntu0.24.04.2"}]}],"versions":["23.09.0-1","23.09.0-2","24.03.0~git20240205.ebb7076-1","24.03.1-2ubuntu1","24.03.1-2ubuntu3","24.03.2-0ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-25.1"}]}]}],"products":[{"vendor":"red hat","product":"fast datapath for red hat enterprise linux 8"},{"vendor":"red hat","product":"fast datapath for red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat openshift container platform 4"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2025:1083","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1084","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1085","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1086","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1087","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1088","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1089","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1090","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1091","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1092","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1093","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1094","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1095","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1096","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1097","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-0650","tags":["vdb-entry","x_refsource_REDHAT","web","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339537","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/01/22/5","tags":["web","article","report"]},{"url":"http://www.openwall.com/lists/oss-security/2025/01/22/11","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0650","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gmx5-xv9g-ph7f"},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-0650","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1083.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-0650","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1084.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1085.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1086.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1087.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1088.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1089.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1090.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1091.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1092.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1093.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1094.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1095.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1096.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1097.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250561-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1236353","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0650","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250578-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250583-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250742-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260280-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1210054","tags":["report"]},{"url":"https://bugzilla.suse.com/1212125","tags":["report"]},{"url":"https://bugzilla.suse.com/1216002","tags":["report"]},{"url":"https://bugzilla.suse.com/1219465","tags":["report"]},{"url":"https://bugzilla.suse.com/1255435","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2182","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260290-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620049-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620061-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623188-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1262498","tags":["report"]},{"url":"https://bugzilla.suse.com/1262499","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5367","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2025-0650","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7396-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-0650","title":"Ovn: egress acls may be bypassed via specially crafted udp packet","description":"A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.","status":"published","published":"2025-01-23T16:34:31.39Z","modified":"2025-11-20T07:25:53.629Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:32:53.81273Z"}],"euvd":[{"id":"EUVD-2025-1804","description":"A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.","status":"published","published":"2025-01-23T16:34:31Z","modified":"2025-11-20T07:25:53Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:15.042838Z"}],"ghsa":[{"id":"GHSA-gmx5-xv9g-ph7f","title":"A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass...","description":"A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.","status":"published","published":"2025-01-23T18:31:20Z","modified":"2025-02-06T09:31:47Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:59:48.779987Z"}],"nvd":[{"id":"CVE-2025-0650","description":"A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.","status":"published","published":"2025-01-23T17:15:22.163Z","modified":"2026-06-17T08:26:54.183Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:10:49.483601Z"}],"osv":[{"id":"DEBIAN-CVE-2025-0650","description":"A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.","status":"published","published":"2025-01-23T17:15:22.163Z","modified":"2026-10-24T18:00:05.368614096Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:44.747956Z"},{"id":"RHSA-2025:1083","title":"Red Hat Security Advisory: ovn22.03 security update","status":"published","published":"2025-02-07T10:20:04Z","modified":"2026-03-18T11:36:56.398033Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:1084","title":"Red Hat Security Advisory: ovn22.06 security update","status":"published","published":"2025-02-07T10:20:04Z","modified":"2026-03-18T11:36:57.069636Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:1085","title":"Red Hat Security Advisory: ovn22.09 security update","status":"published","published":"2025-02-07T10:20:05Z","modified":"2026-03-18T11:36:55.929587Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:1086","title":"Red Hat Security Advisory: ovn22.12 security update","status":"published","published":"2025-02-07T10:20:05Z","modified":"2026-03-18T11:36:56.622165Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:1087","title":"Red Hat Security Advisory: ovn23.03 security update","status":"published","published":"2025-02-07T10:20:06Z","modified":"2026-03-18T11:36:56.564509Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:1088","title":"Red Hat Security Advisory: ovn23.06 security update","status":"published","published":"2025-02-07T10:20:06Z","modified":"2026-03-18T11:36:57.114413Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:1089","title":"Red Hat Security Advisory: ovn22.03 security update","status":"published","published":"2025-02-07T10:20:07Z","modified":"2026-03-18T11:36:56.452727Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:1090","title":"Red Hat Security Advisory: ovn22.06 security update","status":"published","published":"2025-02-07T10:20:07Z","modified":"2026-03-18T11:36:56.421954Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:1091","title":"Red Hat Security Advisory: ovn22.09 security update","status":"published","published":"2025-02-07T10:20:08Z","modified":"2026-03-18T11:36:56.178079Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:1092","title":"Red Hat Security Advisory: ovn22.12 security update","status":"published","published":"2025-02-07T10:20:08Z","modified":"2026-03-18T11:36:56.176666Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:1093","title":"Red Hat Security Advisory: ovn23.03 security update","status":"published","published":"2025-02-07T10:20:09Z","modified":"2026-03-18T11:36:56.205604Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:1094","title":"Red Hat Security Advisory: ovn23.06 security update","status":"published","published":"2025-02-07T10:20:10Z","modified":"2026-03-18T11:36:56.762951Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:1095","title":"Red Hat Security Advisory: ovn23.09 security update","status":"published","published":"2025-02-07T10:20:10Z","modified":"2026-03-18T11:36:56.224399Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:1096","title":"Red Hat Security Advisory: ovn24.03 security update","status":"published","published":"2025-02-07T10:20:11Z","modified":"2026-03-18T11:36:56.502377Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:1097","title":"Red Hat Security Advisory: ovn24.09 security update","status":"published","published":"2025-02-07T10:20:11Z","modified":"2026-03-18T11:36:56.499099Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"UBUNTU-CVE-2025-0650","description":"A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network. OVN provides rudimentary DNS caching as an optional feature to speed up lookups of frequently-used domains. When this feature is enabled, due to the OpenFlow rules that OVN installs in Open vSwitch, it is possible for an attacker to craft a UDP packet that can bypass egress ACL rules. Egress ACL rules are those that have the \"direction\" set to \"to-lport\". The OVN installation is vulnerable if a logical switch has DNS records set on it AND if the same switch has any egress ACLs configured on it. The switch is considered to have egress ACLs configured if the switch has an egress ACL configured directly on it using the \"acls\" column of the logical switch. A switch is also considered to have egress ACLs configured if any of its logical switch ports are part of a port group that has egress ACLs configured in its \"acls\" column. A python script (vuln_test.py) is attached to this advisory and can be used to determine if your installation is vulnerable. Run it in a location where \"ovn-nbctl\" is installed and can access the northbound database. The script will print to the console whether the installation is vulnerable.","status":"published","published":"2025-01-23T17:15:00Z","modified":"2026-02-04T02:40:24.150522Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:18.664792Z"},{"id":"CVE-2025-0650","description":"A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.","status":"published","published":"2025-01-23T17:15:22Z","modified":"2026-08-26T18:27:38.235171944Z","updated_at":"2026-11-02T15:44:45.712478Z"},{"id":"openSUSE-SU-2025:14757-1","title":"libopenvswitch-3_3-0-3.3.2-25.1 on GA media","description":"These are all security issues fixed in the libopenvswitch-3_3-0-3.3.2-25.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-02-09T00:00:00Z","modified":"2026-02-04T02:48:34.079217Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"SUSE-SU-2025:0561-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n- CVE-2025-0650: ovn: egress ACLs may be bypassed via specially crafted UDP packet. (bsc#1236353)\n","status":"published","published":"2025-02-17T10:39:47Z","modified":"2026-02-04T02:26:25.067625Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0578-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n- CVE-2025-0650: ovn: egress ACLs may be bypassed via specially crafted UDP packet (bsc#1236353).\n","status":"published","published":"2025-02-18T12:53:27Z","modified":"2026-02-04T04:05:15.82584Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0583-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n- CVE-2025-0650: ovn: egress ACLs may be bypassed via specially crafted UDP packet (bsc#1236353).\n","status":"published","published":"2025-02-18T15:02:29Z","modified":"2026-02-04T02:46:52.342317Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0742-1","title":"Security update for openvswitch3","description":"This update for openvswitch3 fixes the following issues:\n\n- CVE-2025-0650: Fixed egress ACLs that may be bypassed via specially crafted UDP packet (bsc#1236353).\n","status":"published","published":"2025-02-28T10:17:30Z","modified":"2026-02-04T03:59:29.484484Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2026:0280-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\nUpdate to v3.1.7:\n\n - CVE-2023-3966: openvswitch, openvswitch3: Invalid memory access in Geneve with HW offload (bsc#1219465).\n - CVE-2024-2182: openvswitch: ov: insufficient validation of incoming BFD packets may lead to denial of service (bsc#1255435).\n - CVE-2023-1668: openvswitch: remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054).\n - CVE-2023-3153: openvswitch,openvswitch3: service monitor MAC flow is not rate limited (bsc#1212125).\n - CVE-2023-5366: openvswitch: missing masks on a final stage with ports trie (bsc#1216002).\n","status":"published","published":"2026-01-23T15:33:56Z","modified":"2026-03-23T04:51:42.427758Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0290-1","title":"Security update for openvswitch3","description":"This update for openvswitch3 fixes the following issues:\n\nUpdate to v3.1.7:\n\n - CVE-2023-3966: openvswitch, openvswitch3: Invalid memory access in Geneve with HW offload (bsc#1219465).\n - CVE-2024-2182: openvswitch: ov: insufficient validation of incoming BFD packets may lead to denial of service (bsc#1255435).\n - CVE-2023-1668: openvswitch: remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054).\n - CVE-2023-3153: openvswitch,openvswitch3: service monitor MAC flow is not rate limited (bsc#1212125).\n - CVE-2023-5366: openvswitch: missing masks on a final stage with ports trie (bsc#1216002).\n","status":"published","published":"2026-01-26T10:34:13Z","modified":"2026-03-23T04:52:06.266664Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:20049-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\nUpdate OpenvSwitch to v3.1.7 and OVN to v23.03.3.\n\nSecurity issues fixed:\n\n- CVE-2023-3966: ovs: invalid memory access and potential denial of service via specially crafted Geneve packets\n  (bsc#1219465).\n- CVE-2023-5366: ovs: OpenFlow rules may be bypassed via specially crafted ICMPv6 Neighbor Advertisement packets sent\n  between virtual machines t(bsc#1216002).\n- CVE-2024-2182: ovn: denial of service via injection of specially crafted BFD packets from inside unprivileged\n  workloads (bsc#1255435).\n- CVE-2025-0650: ovn: egress ACLs may be bypassed via specially crafted UDP packet (bsc#1236353).\n\nOther updates and bugfixes:\n\n- OpenvSwitch:\n  * https://www.openvswitch.org/releases/NEWS-3.1.7.txt\n  * v3.1.7\n    - Bug fixes\n    - OVS validated with DPDK 22.11.7.\n  * v3.1.6\n    - Bug fixes\n    - OVS validated with DPDK 22.11.6.\n  * v3.1.5\n    - Bug fixes\n    - OVS validated with DPDK 22.11.5.\n  * v3.1.4\n    - Bug fixes\n    - OVS validated with DPDK 22.11.4.\n- OVN:\n  * https://github.com/ovn-org/ovn/blob/branch-23.03/NEWS\n  * v23.03.3\n    - Bug fixes\n    - Add \"garp-max-timeout-sec\" config option to vswitchd external-ids to cap the time between when ovn-controller\n      sends gARP packets.\n  * v23.03.1\n    - Bug fixes\n    - CT entries are not flushed by default anymore whenever a load balancer backend is removed. A new, per-LB, option\n      'ct_flush' can be used to restore the previous behavior. Disabled by default.\n    - Always allow IPv6 Router Discovery, Neighbor Discovery, and Multicast Listener Discovery protocols, regardless of\n      ACLs defined.\n    - Send ICMP Fragmentation Needed packets back to offending ports when communicating with multichassis ports using\n      frames that don't fit through a tunnel. This is done only for logical switches that are attached to a physical\n      network via a localnet port, in which case multichassis ports may have an effective MTU different from regular\n      ports and hence may need this mechanism to maintain connectivity with other peers in the network.\n    - ECMP routes use L4_SYM dp-hash by default if the datapath supports it. Existing sessions might get re-hashed to a\n      different ECMP path when OVN detects the algorithm support in the datapath during an upgrade or restart of\n      ovn-controller.\n","status":"published","published":"2026-01-09T10:54:58Z","modified":"2026-03-23T04:52:31.998653Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:20061-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\nUpdate OpenvSwitch to v3.1.7 and OVN to v23.03.3:\n\nSecurity issues fixed:\n\n- CVE-2023-3966: ovs: invalid memory access and potential denial of service via specially crafted Geneve packets\n  (bsc#1219465).\n- CVE-2023-5366: ovs: OpenFlow rules may be bypassed via specially crafted ICMPv6 Neighbor Advertisement packets sent\n  between virtual machines t(bsc#1216002).\n- CVE-2024-2182: ovn: denial of service via injection of specially crafted BFD packets from inside unprivileged\n  workloads (bsc#1255435).\n- CVE-2025-0650: ovn: egress ACLs may be bypassed via specially crafted UDP packet (bsc#1236353).\n\nOther updates and bugfixes:\n\n- OpenvSwitch upstream bugfix updates:\n  * https://www.openvswitch.org/releases/NEWS-3.1.7.txt\n  * v3.1.7\n    - Bug fixes\n    - OVS validated with DPDK 22.11.7.\n  * v3.1.6\n    - Bug fixes\n    - OVS validated with DPDK 22.11.6.\n  * v3.1.5\n    - Bug fixes\n    - OVS validated with DPDK 22.11.5.\n  * v3.1.4\n    - Bug fixes\n    - OVS validated with DPDK 22.11.4.\n  \n- OVN upstream bugfix updates:\n  * https://github.com/ovn-org/ovn/blob/branch-23.03/NEWS\n  * v23.03.3\n    - Bug fixes\n    - Add \"garp-max-timeout-sec\" config option to vswitchd external-ids to cap the time between when ovn-controller\n      sends gARP packets.\n  * v23.03.1\n    - Bug fixes\n    - CT entries are not flushed by default anymore whenever a load balancer backend is removed.  A new, per-LB, option\n      'ct_flush' can be used to restore the previous behavior. Disabled by default.\n    - Always allow IPv6 Router Discovery, Neighbor Discovery, and Multicast Listener Discovery protocols, regardless of\n      ACLs defined.\n    - Send ICMP Fragmentation Needed packets back to offending ports when communicating with multichassis ports using\n      frames that don't fit through a tunnel. This is done only for logical switches that are attached to a physical\n      network via a localnet port, in which case multichassis ports may have an effective MTU different from regular\n      ports and hence may need this mechanism to maintain connectivity with other peers in the network.\n    - ECMP routes use L4_SYM dp-hash by default if the datapath supports it. Existing sessions might get re-hashed to a\n      different ECMP path when OVN detects the algorithm support in the datapath during an upgrade or restart of\n      ovn-controller.\n","status":"published","published":"2026-01-08T14:43:50Z","modified":"2026-03-23T04:52:32.866694Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:23188-1","title":"Security update for openvswitch","description":"This update for openvswitch fixes the following issues:\n\n- CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498).\n- CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499).\n","status":"published","published":"2026-08-17T16:50:12Z","modified":"2026-08-26T18:23:31.188916145Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"USN-7396-1","title":"ovn vulnerability","description":"Marius Berntsberg, Trygve Vea, Tore Anderson, Rodolfo Alonso, Jay Faulkner,\nand Brian Haley discovered that OVN incorrectly handled certain crafted UDP\npackets. A remote attacker could possibly use this issue to bypass egress\nACL rules.\n","status":"published","published":"2025-03-31T12:01:41Z","modified":"2026-02-10T04:47:47Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}