CVE-2023-3153
Estado: ModificadaMedia (5.3)—
A flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit. This issue could allow an attacker to cause a denial of service, including on deployments with CoPP enabled and properly configured.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- Puntuación base: 5.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.99%
- Percentil entre todas las CVEs puntuadas: 61
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (3)
CWE
- CWE-400
- CWE-770
Referencias
- https://access.redhat.com/security/cve/CVE-2023-3153
- https://bugzilla.redhat.com/show_bug.cgi?id=2213279
- https://github.com/ovn-org/ovn/commit/9a3f7ed905e525ebdcb14541e775211cbb0203bd
- https://github.com/ovn-org/ovn/issues/198
- https://mail.openvswitch.org/pipermail/ovs-announce/2023-August/000327.html
- https://mail.openvswitch.org/pipermail/ovs-dev/2023-August/407553.html
- https://access.redhat.com/security/cve/CVE-2023-3153
- https://bugzilla.redhat.com/show_bug.cgi?id=2213279
- https://github.com/ovn-org/ovn/commit/9a3f7ed905e525ebdcb14541e775211cbb0203bd
- https://github.com/ovn-org/ovn/issues/198
- https://mail.openvswitch.org/pipermail/ovs-announce/2023-August/000327.html
- https://mail.openvswitch.org/pipermail/ovs-dev/2023-August/407553.html
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-3153",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2023-3153",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-09-19T14:24:33.931307Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "secalert@redhat.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "LOW",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 1.4,
"exploitabilityScore": 3.9
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "LOW",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 1.4,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "secalert@redhat.com",
"affectedData": [
{
"vendor": "n/a",
"product": "ovn",
"versions": [
{
"status": "unaffected",
"version": "22.12.1"
},
{
"status": "unaffected",
"version": "22.03.3"
},
{
"status": "unaffected",
"version": "23.06.1"
},
{
"status": "unaffected",
"version": "23.03.1"
},
{
"status": "unaffected",
"version": "22.09.2"
}
]
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:7::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 7",
"packageName": "ovn2.11",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:7::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 7",
"packageName": "ovn2.12",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:7::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 7",
"packageName": "ovn2.13",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 8",
"packageName": "ovn-2021",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 8",
"packageName": "ovn2.11",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 8",
"packageName": "ovn2.12",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 8",
"packageName": "ovn2.13",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 8",
"packageName": "ovn22.03",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 8",
"packageName": "ovn22.06",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 8",
"packageName": "ovn22.09",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 8",
"packageName": "ovn22.12",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 9",
"packageName": "ovn-2021",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 9",
"packageName": "ovn22.03",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 9",
"packageName": "ovn22.06",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 9",
"packageName": "ovn22.09",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 9",
"packageName": "ovn22.12",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4",
"packageName": "ovn-2021",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4",
"packageName": "ovn21.09",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4",
"packageName": "ovn21.12",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4",
"packageName": "ovn22.03",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4",
"packageName": "ovn22.06",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4",
"packageName": "ovn22.09",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4",
"packageName": "ovn22.12",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4",
"packageName": "ovn23.03",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openstack:13"
],
"vendor": "Red Hat",
"product": "Red Hat OpenStack Platform 13 (Queens)",
"packageName": "ovn2.11",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unknown"
},
{
"vendor": "Fedora",
"product": "Fedora",
"packageName": "ovn",
"collectionURL": "https://packages.fedoraproject.org/",
"defaultStatus": "affected"
}
]
}
],
"published": "2023-10-04T12:15:10.503",
"references": [
{
"url": "https://access.redhat.com/security/cve/CVE-2023-3153",
"tags": [
"Third Party Advisory"
],
"source": "secalert@redhat.com"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2213279",
"tags": [
"Issue Tracking"
],
"source": "secalert@redhat.com"
},
{
"url": "https://github.com/ovn-org/ovn/commit/9a3f7ed905e525ebdcb14541e775211cbb0203bd",
"tags": [
"Patch"
],
"source": "secalert@redhat.com"
},
{
"url": "https://github.com/ovn-org/ovn/issues/198",
"tags": [
"Issue Tracking"
],
"source": "secalert@redhat.com"
},
{
"url": "https://mail.openvswitch.org/pipermail/ovs-announce/2023-August/000327.html",
"tags": [
"Mitigation",
"Patch"
],
"source": "secalert@redhat.com"
},
{
"url": "https://mail.openvswitch.org/pipermail/ovs-dev/2023-August/407553.html",
"tags": [
"Patch"
],
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2023-3153",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2213279",
"tags": [
"Issue Tracking"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://github.com/ovn-org/ovn/commit/9a3f7ed905e525ebdcb14541e775211cbb0203bd",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://github.com/ovn-org/ovn/issues/198",
"tags": [
"Issue Tracking"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://mail.openvswitch.org/pipermail/ovs-announce/2023-August/000327.html",
"tags": [
"Mitigation",
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://mail.openvswitch.org/pipermail/ovs-dev/2023-August/407553.html",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "secalert@redhat.com",
"description": [
{
"lang": "en",
"value": "CWE-400"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-770"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit. This issue could allow an attacker to cause a denial of service, including on deployments with CoPP enabled and properly configured."
},
{
"lang": "es",
"value": "Se encontró una falla en Open Virtual Network donde el monitor de servicio MAC no califica correctamente el límite. Este problema podría permitir que un atacante provoque una denegación de servicio, incluso en implementaciones con CoPP habilitado y configurado correctamente."
}
],
"lastModified": "2026-06-17T06:13:28.193",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ovn:open_virtual_network:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5CA7DFF4-C739-4EE8-AC5D-6EC06E387309",
"versionEndExcluding": "22.03.3"
},
{
"criteria": "cpe:2.3:a:ovn:open_virtual_network:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "66B2BA9A-04F3-4E63-B367-E7AE5AD04FB1",
"versionEndExcluding": "22.09.2",
"versionStartIncluding": "22.03.4"
},
{
"criteria": "cpe:2.3:a:ovn:open_virtual_network:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "393B5A8F-01A6-48E3-9D04-E9F5EDDCA555",
"versionEndExcluding": "22.12.1",
"versionStartIncluding": "22.09.3"
},
{
"criteria": "cpe:2.3:a:ovn:open_virtual_network:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "20978238-A456-4B17-B7AD-DC006C6B16A2",
"versionEndExcluding": "23.03.1",
"versionStartIncluding": "22.12.2"
},
{
"criteria": "cpe:2.3:a:ovn:open_virtual_network:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D7AF4A0C-4E74-4721-96E0-E5A400B9AF58",
"versionEndExcluding": "23.06.1",
"versionStartIncluding": "23.03.2"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "932D137F-528B-4526-9A89-CD59FA1AB0FE"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:redhat:fast_datapath:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A63D05D-BFAF-484B-BA49-5F5E399CDA02"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "secalert@redhat.com"
}