RHSA-2021:2077: Red Hat Security Advisory: openvswitch security update

An update for openvswitch is now available in Fast Datapath for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. Security Fix(es):

• lldpd: buffer overflow in the lldp_decode function in daemon/protocols/lldp.c (CVE-2015-8011)
• openvswitch: limitation in the OVS packet parsing in userspace leads to DoS (CVE-2020-35498)
• lldp/openvswitch: denial of service via externally triggered memory leak (CVE-2020-27827) Related CVEs:
• CVE-2015-8011: lldpd: buffer overflow in the lldp_decode function in daemon/protocols/lldp.c
• CVE-2020-27827: lldp/openvswitch: denial of service via externally triggered memory leak
• CVE-2020-35498: openvswitch: limitation in the OVS packet parsing in userspace leads to DoS