CVE-2020-27827: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Affected products

• Fedoraproject Fedora: version 33 only
• Lldpd Project Lldpd: before 1.0.8 (fixed in 1.0.8)
• Openvswitch Openvswitch: from 2.6.0, before 2.6.9 (fixed in 2.6.9); from 2.7.0, before 2.7.12 (fixed in 2.7.12); from 2.8.0, before 2.8.10 (fixed in 2.8.10); from 2.9.0, before 2.9.8 (fixed in 2.9.8); from 2.10.0, before 2.10.6 (fixed in 2.10.6); from 2.11.0, before 2.11.5 (fixed in 2.11.5); …
• Red Hat Enterprise Linux: version 7.0 only; version 8.0 only
• Red Hat Openshift Container Platform: version 4.0 only
• Red Hat Openstack: version 10 only; version 13 only
• Red Hat Virtualization: version 4.0 only
• Siemens SIMATIC HMI Unified Comfort Panels Firmware: before 17 (fixed in 17)
• Siemens SIMATIC Net CP 1243-1 Firmware: affected versions not specified
• Siemens SIMATIC Net CP 1243-8 Irc Firmware: affected versions not specified
• Siemens SIMATIC Net CP 1542sp-1 Firmware: affected versions not specified
• Siemens SIMATIC Net CP 1542sp-1 Irc Firmware: affected versions not specified
• Siemens SIMATIC Net CP 1543-1 Firmware: affected versions not specified
• Siemens SIMATIC Net CP 1543sp-1 Firmware: affected versions not specified
• Siemens SIMATIC Net CP 1545-1 Firmware: affected versions not specified
• Siemens Sinumerik One Firmware: before 2.0.1 (fixed in 2.0.1)
• Siemens Tim 1531 Irc Firmware: before 2.2 (fixed in 2.2)

Published 2021-03-18. Last modified 2026-06-17.