https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:15:08 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0623 certfr-2026-avi-0623 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0623 https://cve.radiocsirt.org/vuln/euvd-2026-362247 EUVD-2026-362247 https://cve.radiocsirt.org/vuln/euvd-2026-362247 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34956 <p>A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can send a specially crafted FTP stream with an EPASV command exceeding 255 characters. This heap access error can lead to a crash, resulting in a Denial of Service (DoS) for the affected system.</p> <p>A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can send a specially crafted FTP stream with an EPASV command exceeding 255 characters. This heap access error can lead to a crash, resulting in a Denial of Service (DoS) for the affected system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-34956 https://cve.radiocsirt.org/vuln/ghsa-q5f5-xxh8-jx9h <p>A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can send a specially crafted FTP stream with an EPASV command exceeding 255 characters. This heap access error can lead to a crash, resulting in a Denial of Service (DoS) for the affected system.</p> <p>A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can send a specially crafted FTP stream with an EPASV command exceeding 255 characters. This heap access error can lead to a crash, resulting in a Denial of Service (DoS) for the affected system.</p> https://cve.radiocsirt.org/vuln/ghsa-q5f5-xxh8-jx9h https://cve.radiocsirt.org/vuln/msrc_cve-2026-34956 msrc_CVE-2026-34956 https://cve.radiocsirt.org/vuln/msrc_cve-2026-34956 https://cve.radiocsirt.org/vuln/oesa-2026-1871 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: openvswitch</p> <p>Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. Security Fix(es):</p> <p>[&amp;quot;Description\n===========\n\nMultiple versions of Open vSwitch are vulnerable to crafted FTP payloads\ncausing invalid memory accesses, potential denial of service, and possible\nremote code execution. This impacts the userspace implementation of\nconntrack. Triggering the vulnerability requires that Open vSwitch has\nconfigured conntrack flows specifying the FTP alg handler. Conntrack\nhandlers in userspace are not automatically applied.\n\nThe issue is caused by type narrowing when copying FTP substrings. It\nhas existed in all versions of the userspace conntrack supporting the\nFTP handler. This was introduced with Open vSwitch version 2.8.0 and\naffects all versions up to 3.7.0.\n\nThe Common Vulnerabilities and Exposures project (cve.mitre.org) has\nassigned CVE-2026-34956 identifier to this issue. At the time of writing\nthe flaw is considered with Moderate impact and 5.9 CVSS.\n\n\nMitigation\n==========\n\nFor any affected version of Open vSwitch, avoiding the FTP alg will\nprevent the issue from triggering. The Open vSwitch team does not\nrecommend attempting to mitigate the vulnerability this way because it\nmay impact packet forwarding.\n\nBy default, alg handlers are not installed, and must be added as part\nof the OpenFlow rules (via &amp;apos;ct(alg=ftp)&amp;apos; for example).\n\nUsers can check if t…</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: openvswitch</p> <p>Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. Security Fix(es):</p> <p>[&amp;quot;Description\n===========\n\nMultiple versions of Open vSwitch are vulnerable to crafted FTP payloads\ncausing invalid memory accesses, potential denial of service, and possible\nremote code execution. This impacts the userspace implementation of\nconntrack. Triggering the vulnerability requires that Open vSwitch has\nconfigured conntrack flows specifying the FTP alg handler. Conntrack\nhandlers in userspace are not automatically applied.\n\nThe issue is caused by type narrowing when copying FTP substrings. It\nhas existed in all versions of the userspace conntrack supporting the\nFTP handler. This was introduced with Open vSwitch version 2.8.0 and\naffects all versions up to 3.7.0.\n\nThe Common Vulnerabilities and Exposures project (cve.mitre.org) has\nassigned CVE-2026-34956 identifier to this issue. At the time of writing\nthe flaw is considered with Moderate impact and 5.9 CVSS.\n\n\nMitigation\n==========\n\nFor any affected version of Open vSwitch, avoiding the FTP alg will\nprevent the issue from triggering. The Open vSwitch team does not\nrecommend attempting to mitigate the vulnerability this way because it\nmay impact packet forwarding.\n\nBy default, alg handlers are not installed, and must be added as part\nof the OpenFlow rules (via &amp;apos;ct(alg=ftp)&amp;apos; for example).\n\nUsers can check if t…</p> https://cve.radiocsirt.org/vuln/oesa-2026-1871 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10534-1 <p>libopenvswitch-3_7-0-3.7.1-33.1 on GA media</p> <p>libopenvswitch-3_7-0-3.7.1-33.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10534-1 https://cve.radiocsirt.org/vuln/suse-su-2026:1440-1 <p>Security update for openvswitch3</p> <p>Security update for openvswitch3</p> https://cve.radiocsirt.org/vuln/suse-su-2026:1440-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34956 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: openvswitch, Ubuntu:20.04:LTS: openvswitch, Ubuntu:22.04:LTS: openvswitch, Ubuntu:24.04:LTS: openvswitch, Ubuntu:25.10: openvswitch, Ubuntu:26.04:LTS: openvswitch</p> <p>A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can send a specially crafted FTP stream with an EPASV command exceeding 255 characters. This heap access error can lead to a crash, resulting in a Denial of Service (DoS) for the affected system.</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: openvswitch, Ubuntu:20.04:LTS: openvswitch, Ubuntu:22.04:LTS: openvswitch, Ubuntu:24.04:LTS: openvswitch, Ubuntu:25.10: openvswitch, Ubuntu:26.04:LTS: openvswitch</p> <p>A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can send a specially crafted FTP stream with an EPASV command exceeding 255 characters. This heap access error can lead to a crash, resulting in a Denial of Service (DoS) for the affected system.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34956