CVE-2021-3905
A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments.
| Software | From | Fixed in |
|---|---|---|
| openvswitch / openvswitch | - | 2.17.0 |
| redhat / enterprise_linux_fast_datapath | 7.0 | 7.0.x |
| canonical / ubuntu_linux | 21.10 | 21.10.x |
| fedoraproject / fedora | 35 | 35.x |
| redhat / enterprise_linux_fast_datapath | 8.0 | 8.0.x |
- https://access.redhat.com/security/cve/CVE-2021-3905
- https://bugzilla.redhat.com/show_bug.cgi?id=2019692
- https://github.com/openvswitch/ovs-issues/issues/226
- https://github.com/openvswitch/ovs/commit/803ed12e31b0377c37d7aa8c94b3b92f2081e349
- https://security.gentoo.org/glsa/202311-16
- https://ubuntu.com/security/CVE-2021-3905
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime