USN-5065-1: Open vSwitch vulnerability

08 September 2021

Open vSwitch could be made to crash or run programs if it received specially crafted network traffic.

Releases

Packages

Details

It was discovered that Open vSwitch incorrectly handled decoding RAW_ENCAP
actions. A remote attacker could use this issue to cause Open vSwitch to
crash, resulting in a denial of service, or possibly execute arbitrary
code.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 21.04
Ubuntu 20.04

In general, a standard system update will make all the necessary changes.

References