Ubuntu 20.10 USN-4691-2 critical: Open vSwitch vulnerability exposure

ubuntu

January 13, 2021

Several security issues were fixed in Open vSwitch.

Summary

Several security issues were fixed in Open vSwitch.

Software Description:

- openvswitch: Ethernet virtual switch

Details:

Jonas Rudloff discovered that Open vSwitch incorrectly handled certain

malformed LLDP packets. A remote attacker could use this issue to cause

Open vSwitch to crash, resulting in a denial of service, or possibly

execute arbitrary code.

Topics Covered

security advisory denial of service security update security issue software update DoS Ubuntu ubuntu dos risk openvswitch Open vSwitch

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
  openvswitch-common              2.13.1-0ubuntu1.2

Ubuntu 20.04 LTS:
  openvswitch-common              2.13.1-0ubuntu0.20.04.3

Ubuntu 18.04 LTS:
  openvswitch-common              2.9.7-0ubuntu0.18.04.2

Ubuntu 16.04 LTS:
  openvswitch-common              2.5.9-0ubuntu0.16.04.2

In general, a standard system update will make all the necessary changes.