Vulnerabilidades do Red Hat Fast Datapath for Red Hat Enterprise Linux 8
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Red Hat Fast Datapath for Red Hat Enterprise Linux 8: 2 registro(s), com versões afetadas e correções.
CVE-2026-5367
Alta · 8.6
CWE-130 24/04/2026
Ovn: ovn: information disclosure via crafted dhcpv6 packets
A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could cause the ovn-controller to read beyond the bounds of a packet. This out-of-bounds read can lead to the disclosure of sensitive information stored in heap memory, which is then returned to the attacker's virtual machine port.
CVE-2026-5265
Média · 6.5
CWE-130 24/04/2026
Ovn: ovn: heap over-read in icmp error response generation
When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header's self-declared total length (ip_tot_len for IPv4, ip6_plen for IPv6) without validating it against the actual packet buffer size. A VM can send a short packet with an inflated IP length field that triggers an ICMP error (e.g., by hitting a reject ACL), causing ovn-controller to read heap memory beyond the valid packet data and include it in the ICMP response sent back to the VM.