CVE-2023-3153: Ovn Open Virtual Network

Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days.

A flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit. This issue could allow an attacker to cause a denial of service, including on deployments with CoPP enabled and properly configured.

Affected products

• Ovn Open Virtual Network: before 22.03.3 (fixed in 22.03.3); from 22.03.4, before 22.09.2 (fixed in 22.09.2); from 22.09.3, before 22.12.1 (fixed in 22.12.1); from 22.12.2, before 23.03.1 (fixed in 23.03.1); from 23.03.2, before 23.06.1 (fixed in 23.06.1)
• Red Hat Fast Datapath: affected versions not specified
• Red Hat Openshift Container Platform: version 4.0 only

Published 2023-10-04. Last modified 2026-06-17.