Alpine/openvswitch: medium 5.5
Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.
Action: Upgrade openvswitch to 2.12.3-r2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.11.0 | 2.12.3-r2 | - |
Fixed versions
| 2.12.3-r2 |
Sources
- osv: ALPINE-CVE-2021-36980#Alpine:v3.22/openvswitch
- https://security.alpinelinux.org/vuln/CVE-2021-36980
published · modified · JSON