QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2020-35498

Back to search

CVE-2020-35498

Published: Feb 11, 2021

Modified: Apr 23, 2025

PUBLISHED

Description

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

VendorProductVersions

n/a

openvswitch

affected
openvswitch 2.5.12, openvswitch 2.6.10, openvswitch 2.7.13, openvswitch 2.8.11, openvswitch 2.9.9, openvswitch 2.10.7, openvswitch 2.11.6, openvswitch 2.12.3, openvswitch 2.13.3, openvswitch 2.14.2

Weaknesses (CWE)

CWE-400

References

DSA-4852
vendor-advisory
FEDORA-2021-fba11d37ee
vendor-advisory
GLSA-202311-16
vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now