CVE-2023-3153

A flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit. This issue could allow an attacker to cause a denial of service, including on deployments with CoPP enabled and properly configured.

Database specific

{
    "cwe_ids": [
        "CWE-400"
    ],
    "cna_assigner": "redhat",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/3xxx/CVE-2023-3153.json"
}

References

Affected packages

Git / github.com/ovn-org/ovn

Affected ranges

Type

GIT

Repo

https://github.com/ovn-org/ovn

Events

Introduced

Fixed

e973969e779f8bff3e450745284c67cb648d2dd5

Introduced

cb34bf2b9529f96c3d6dc3e9afa818101db6f0ec

Fixed

f60f6f9aaa7ec38885137ee1f6299a10da003385

Introduced

cd81684820b47ab07667637f726e1fd2a81e06a7

Fixed

c851fe0931b627c0ceb96272520a10927f10c535

Introduced

daa3d8b9d8225f1fdccc0297dce38ca8428f813b

Fixed

ba5710edbfc8b11eb83500eb7da0beb39b955273

Introduced

05d20a51032d65b6eed0c499cbb56ddbde5c754d

Fixed

a20f880efdba9dcf19c1df77b31a3b8b9dffa345

Fixed

9a3f7ed905e525ebdcb14541e775211cbb0203bd

Database specific

{
    "cpe": "cpe:2.3:a:ovn:open_virtual_network:*:*:*:*:*:*:*:*",
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "22.03.3"
        },
        {
            "introduced": "22.03.4"
        },
        {
            "fixed": "22.09.2"
        },
        {
            "introduced": "22.09.3"
        },
        {
            "fixed": "22.12.1"
        },
        {
            "introduced": "22.12.2"
        },
        {
            "fixed": "23.03.1"
        },
        {
            "introduced": "23.03.2"
        },
        {
            "fixed": "23.06.1"
        }
    ]
}

Affected versions

v22.*

v22.03.0

v22.03.1

v22.03.2

v22.09.0

v22.09.1

v22.12.0

v23.*

v23.03.0

v23.06.0

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-3153.json"

vanir_signatures

[
    {
        "target": {
            "function": "build_lswitch_destination_lookup_bmcast",
            "file": "northd/northd.c"
        },
        "source": "https://github.com/ovn-org/ovn/commit/9a3f7ed905e525ebdcb14541e775211cbb0203bd",
        "signature_type": "Function",
        "id": "CVE-2023-3153-7f2ceda7",
        "digest": {
            "length": 1612.0,
            "function_hash": "100707879268515689071228807156796924197"
        },
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "target": {
            "file": "lib/copp.c"
        },
        "source": "https://github.com/ovn-org/ovn/commit/9a3f7ed905e525ebdcb14541e775211cbb0203bd",
        "signature_type": "Line",
        "id": "CVE-2023-3153-a165b368",
        "digest": {
            "line_hashes": [
                "50986681710720372360707408566068477418",
                "252480662219656878439145177761545982267",
                "142032261047848354833506823247262358887",
                "329164269853397579377214380351543625034"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "target": {
            "file": "lib/copp.h"
        },
        "source": "https://github.com/ovn-org/ovn/commit/9a3f7ed905e525ebdcb14541e775211cbb0203bd",
        "signature_type": "Line",
        "id": "CVE-2023-3153-d78e6bf9",
        "digest": {
            "line_hashes": [
                "273984248180741880940998914494089443661",
                "203185577382962333624321689680785327007",
                "155368957386231067524344954408589049656",
                "253753055849551589332896634626431003037"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "target": {
            "file": "northd/northd.c"
        },
        "source": "https://github.com/ovn-org/ovn/commit/9a3f7ed905e525ebdcb14541e775211cbb0203bd",
        "signature_type": "Line",
        "id": "CVE-2023-3153-f4ba0918",
        "digest": {
            "line_hashes": [
                "130994271946306197769789664995555076929",
                "200663036279558230899598810320786448335",
                "257927616725762713937645602867735527471",
                "13358029243250610857060806115376031208",
                "236156749985826493025022585418312343674",
                "295079638578447228654133263734781380464"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "deprecated": false
    }
]

vanir_signatures_modified

"2026-07-15T01:36:52Z"