Logo
vulnerabilityCVE-2023-5366
Name
CVE-2023-5366
Source
NVD ( link)Debian ( link)
Description
A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
ovn
Exploitable

Vulnerability Ratings#


7.1
CVSSv31
5.5
CVSSv31

Others affected components#


Name
Project
Project Version
Version
Status
openwrt
openwrt-25.12
<LINUX_VERSION>.2.17.9-r2
Not Affected
openwrt
openwrt-25.12
22.03.5-r1
Exploitable