CVE-2024-2182
Estado: AplazadaMedia (6.5)—
A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 6.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.78%
- Percentil entre todas las CVEs puntuadas: 55
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
CWE
- CWE-346
Referencias
- https://access.redhat.com/errata/RHSA-2024:1385
- https://access.redhat.com/errata/RHSA-2024:1386
- https://access.redhat.com/errata/RHSA-2024:1387
- https://access.redhat.com/errata/RHSA-2024:1388
- https://access.redhat.com/errata/RHSA-2024:1390
- https://access.redhat.com/errata/RHSA-2024:1391
- https://access.redhat.com/errata/RHSA-2024:1392
- https://access.redhat.com/errata/RHSA-2024:1393
- https://access.redhat.com/errata/RHSA-2024:1394
- https://access.redhat.com/errata/RHSA-2024:4035
- https://access.redhat.com/security/cve/CVE-2024-2182
- https://bugzilla.redhat.com/show_bug.cgi?id=2267840
- https://mail.openvswitch.org/pipermail/ovs-announce/2024-March/000346.html
- https://www.openwall.com/lists/oss-security/2024/03/12/5
- http://www.openwall.com/lists/oss-security/2024/03/12/5
- https://access.redhat.com/errata/RHSA-2024:1385
- https://access.redhat.com/errata/RHSA-2024:1386
- https://access.redhat.com/errata/RHSA-2024:1387
- https://access.redhat.com/errata/RHSA-2024:1388
- https://access.redhat.com/errata/RHSA-2024:1390
- https://access.redhat.com/errata/RHSA-2024:1391
- https://access.redhat.com/errata/RHSA-2024:1392
- https://access.redhat.com/errata/RHSA-2024:1393
- https://access.redhat.com/errata/RHSA-2024:1394
- https://access.redhat.com/errata/RHSA-2024:4035
- https://access.redhat.com/security/cve/CVE-2024-2182
- https://bugzilla.redhat.com/show_bug.cgi?id=2267840
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APR4GCVCMQD3DQUKXDNGIXCCYGE5V7IT/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CB4N522FCS4XWAPUKRWZF6QZ657FCIDF/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XRKXOOOKD56TY3JQVB45N3GCTX3EG4BV/
- https://mail.openvswitch.org/pipermail/ovs-announce/2024-March/000346.html
- https://www.openwall.com/lists/oss-security/2024/03/12/5
JSON original (NVD)
Mostrar
{
"id": "CVE-2024-2182",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2024-2182",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-03-13T14:24:40.610508Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "secalert@redhat.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.5,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "secalert@redhat.com",
"affectedData": [
{
"versions": [
{
"status": "affected",
"version": "20.03.0",
"lessThan": "*",
"versionType": "semver"
}
],
"packageName": "ovn",
"collectionURL": "https://www.github.com/ovn-org/ovn/",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for Red Hat Enterprise Linux 8",
"versions": [
{
"status": "unaffected",
"version": "0:23.06.1-112.el8fdp",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "ovn23.06",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for Red Hat Enterprise Linux 8",
"versions": [
{
"status": "unaffected",
"version": "0:22.12.1-94.el8fdp",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "ovn22.12",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for Red Hat Enterprise Linux 8",
"versions": [
{
"status": "unaffected",
"version": "0:22.03.3-71.el8fdp",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "ovn22.03",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for Red Hat Enterprise Linux 8",
"versions": [
{
"status": "unaffected",
"version": "0:23.03.1-100.el8fdp",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "ovn23.03",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for Red Hat Enterprise Linux 8",
"versions": [
{
"status": "unaffected",
"version": "0:21.12.0-142.el8fdp",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "ovn-2021",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for Red Hat Enterprise Linux 9",
"versions": [
{
"status": "unaffected",
"version": "0:23.09.0-136.el9fdp",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "ovn23.09",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for Red Hat Enterprise Linux 9",
"versions": [
{
"status": "unaffected",
"version": "0:23.06.1-112.el9fdp",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "ovn23.06",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for Red Hat Enterprise Linux 9",
"versions": [
{
"status": "unaffected",
"version": "0:22.12.1-94.el9fdp",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "ovn22.12",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for Red Hat Enterprise Linux 9",
"versions": [
{
"status": "unaffected",
"version": "0:22.03.3-71.el9fdp",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "ovn22.03",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for Red Hat Enterprise Linux 9",
"versions": [
{
"status": "unaffected",
"version": "0:23.03.1-100.el9fdp",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "ovn23.03",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:7::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 7",
"packageName": "ovn2.11",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:7::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 7",
"packageName": "ovn2.12",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:7::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 7",
"packageName": "ovn2.13",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 8",
"packageName": "ovn2.11",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 8",
"packageName": "ovn2.12",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 8",
"packageName": "ovn2.13",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 8",
"packageName": "ovn22.06",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 8",
"packageName": "ovn22.09",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 9",
"packageName": "ovn-2021",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 9",
"packageName": "ovn22.06",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::fastdatapath"
],
"vendor": "Red Hat",
"product": "Fast Datapath for RHEL 9",
"packageName": "ovn22.09",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unknown"
}
]
}
],
"published": "2024-03-12T17:15:59.190",
"references": [
{
"url": "https://access.redhat.com/errata/RHSA-2024:1385",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1386",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1387",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1388",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1390",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1391",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1392",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1393",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1394",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:4035",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2024-2182",
"source": "secalert@redhat.com"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267840",
"source": "secalert@redhat.com"
},
{
"url": "https://mail.openvswitch.org/pipermail/ovs-announce/2024-March/000346.html",
"source": "secalert@redhat.com"
},
{
"url": "https://www.openwall.com/lists/oss-security/2024/03/12/5",
"source": "secalert@redhat.com"
},
{
"url": "http://www.openwall.com/lists/oss-security/2024/03/12/5",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1385",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1386",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1387",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1388",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1390",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1391",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1392",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1393",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1394",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:4035",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2024-2182",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267840",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APR4GCVCMQD3DQUKXDNGIXCCYGE5V7IT/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CB4N522FCS4XWAPUKRWZF6QZ657FCIDF/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XRKXOOOKD56TY3JQVB45N3GCTX3EG4BV/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://mail.openvswitch.org/pipermail/ovs-announce/2024-March/000346.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.openwall.com/lists/oss-security/2024/03/12/5",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Deferred",
"weaknesses": [
{
"type": "Secondary",
"source": "secalert@redhat.com",
"description": [
{
"lang": "en",
"value": "CWE-346"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service."
},
{
"lang": "es",
"value": "Se encontró una falla en la Red Virtual Abierta (OVN). En los clústeres OVN donde se utiliza BFD entre hipervisores para alta disponibilidad, un atacante puede inyectar paquetes BFD especialmente manipulados desde cargas de trabajo sin privilegios, incluidas máquinas virtuales o contenedores, que pueden desencadenar una denegación de servicio."
}
],
"lastModified": "2026-06-17T07:23:53.130",
"sourceIdentifier": "secalert@redhat.com"
}