CVE-2024-2182
Publication date 12 March 2024
Last updated 26 August 2025
Ubuntu priority
Description
A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| ovn | 24.04 LTS noble |
Not affected
|
| 22.04 LTS jammy |
Fixed 22.03.3-0ubuntu0.22.04.2
|
|
| 20.04 LTS focal |
Fixed 20.03.2-0ubuntu0.20.04.5
|
Notes
seth-arnold
patches are in this message on distros: Message-ID: <cf2854ab-8804-4316-908d-130108456f55@redhat.com>
Severity score breakdown
CVSS version: CVSS v3.0
Base score
6.5 · Medium
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
Related Ubuntu Security Notices (USN)
- USN-6691-1
- OVN vulnerability
- 12 March 2024