CVE-2023-3153

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-3153
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-3153.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-3153
Downstream
Related
Published
2023-10-04T11:13:40.083Z
Modified
2026-06-18T04:09:11.340716054Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
Service monitor mac flow is not rate limited
Details

A flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit. This issue could allow an attacker to cause a denial of service, including on deployments with CoPP enabled and properly configured.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/3xxx/CVE-2023-3153.json",
    "cwe_ids": [
        "CWE-400"
    ],
    "cna_assigner": "redhat"
}
References

Affected packages

Git / github.com/ovn-org/ovn

Affected ranges

Type
GIT
Repo
https://github.com/ovn-org/ovn
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
e973969e779f8bff3e450745284c67cb648d2dd5
Introduced
cb34bf2b9529f96c3d6dc3e9afa818101db6f0ec
Fixed
f60f6f9aaa7ec38885137ee1f6299a10da003385
Introduced
cd81684820b47ab07667637f726e1fd2a81e06a7
Fixed
c851fe0931b627c0ceb96272520a10927f10c535
Introduced
daa3d8b9d8225f1fdccc0297dce38ca8428f813b
Fixed
ba5710edbfc8b11eb83500eb7da0beb39b955273
Introduced
05d20a51032d65b6eed0c499cbb56ddbde5c754d
Fixed
a20f880efdba9dcf19c1df77b31a3b8b9dffa345
Fixed
9a3f7ed905e525ebdcb14541e775211cbb0203bd
Database specific 
{
    "cpe": "cpe:2.3:a:ovn:open_virtual_network:*:*:*:*:*:*:*:*",
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "22.03.3"
        },
        {
            "introduced": "22.03.4"
        },
        {
            "fixed": "22.09.2"
        },
        {
            "introduced": "22.09.3"
        },
        {
            "fixed": "22.12.1"
        },
        {
            "introduced": "22.12.2"
        },
        {
            "fixed": "23.03.1"
        },
        {
            "introduced": "23.03.2"
        },
        {
            "fixed": "23.06.1"
        }
    ]
}

Affected versions

v22.*
v22.03.0
v22.03.1
v22.03.2
v22.09.0
v22.09.1
v22.12.0
v23.*
v23.03.0
v23.06.0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-3153.json"