Red Hat Fast Datapath vulnerabilities

3 CVEs affecting Red Hat Fast Datapath, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-5366, published 2023-10-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-1668, published 2023-04-10. High severity, CVSS 8.2. EPSS: 1.2% chance of exploitation in the next 30 days. A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel…
CVE-2023-3153, published 2023-10-04. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. A flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit. This issue could allow an attacker to cause a denial of service, including on deployments with…
CVE-2023-5366, published 2023-10-06. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted…