Ubuntu 20.10: USN-4729-1 Critical: openvswitch Denial of Service

ubuntu

February 10, 2021

Open vSwitch could be made to crash or perform unexpectedly if it received specially crafted network traffic.

Summary

Open vSwitch could be made to crash or perform unexpectedly if it received

specially crafted network traffic.

Software Description:

- openvswitch: Ethernet virtual switch

Details:

Joakim Hindersson discovered that Open vSwitch incorrectly parsed certain

network packets. A remote attacker could use this issue to cause a denial

of service, or possibly alter packet classification.

Topics Covered

security advisory denial of service security issue Ubuntu network traffic network issue openvswitch

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
  openvswitch-common              2.13.1-0ubuntu1.3

Ubuntu 20.04 LTS:
  openvswitch-common              2.13.1-0ubuntu0.20.04.4

Ubuntu 18.04 LTS:
  openvswitch-common              2.9.8-0ubuntu0.18.04.2

Ubuntu 16.04 LTS:
  openvswitch-common              2.5.9-0ubuntu0.16.04.3

In general, a standard system update will make all the necessary changes.