{"action":"Upgrade ovn to 23.03.1-1~deb12u2 or later.","affected":[{"fixed":"23.03.1-1~deb12u2","introduced":"0"}],"component":"ovn","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["23.03.1-1~deb12u2"],"id":"tcs_01M5NK3VK9AKPDRYBYMSJMH9KG","modified_at":"2026-10-24T18:00:05.383535096Z","published_at":"2024-03-12T17:15:59.190Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2024-2182","https://security-tracker.debian.org/tracker/CVE-2024-2182"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2024-2182","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2024-2182"}],"summary":"A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unpriv"}