CVE-2023-3153

A flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit. This issue could allow an attacker to cause a denial of service, including on deployments with CoPP enabled and properly configured.

References

Affected packages

Git / github.com/ovn-org/ovn

Affected ranges

Type: GIT
Repo: https://github.com/ovn-org/ovn
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

9a3f7ed905e525ebdcb14541e775211cbb0203bd

Introduced

05d20a51032d65b6eed0c499cbb56ddbde5c754d

Fixed

a20f880efdba9dcf19c1df77b31a3b8b9dffa345

Introduced

cb34bf2b9529f96c3d6dc3e9afa818101db6f0ec

Fixed

f60f6f9aaa7ec38885137ee1f6299a10da003385

Introduced

cd81684820b47ab07667637f726e1fd2a81e06a7

Fixed

c851fe0931b627c0ceb96272520a10927f10c535

Introduced

daa3d8b9d8225f1fdccc0297dce38ca8428f813b

Fixed

ba5710edbfc8b11eb83500eb7da0beb39b955273

Affected versions

v22.*

v22.09.3

v22.12.2

v23.*

v23.03.2

Database specific

vanir_signatures

[
    {
        "target": {
            "file": "northd/northd.c",
            "function": "build_lswitch_destination_lookup_bmcast"
        },
        "digest": {
            "length": 1612.0,
            "function_hash": "100707879268515689071228807156796924197"
        },
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "id": "CVE-2023-3153-7f2ceda7",
        "source": "https://github.com/ovn-org/ovn/commit/9a3f7ed905e525ebdcb14541e775211cbb0203bd"
    },
    {
        "target": {
            "file": "lib/copp.c"
        },
        "digest": {
            "line_hashes": [
                "50986681710720372360707408566068477418",
                "252480662219656878439145177761545982267",
                "142032261047848354833506823247262358887",
                "329164269853397579377214380351543625034"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "id": "CVE-2023-3153-a165b368",
        "source": "https://github.com/ovn-org/ovn/commit/9a3f7ed905e525ebdcb14541e775211cbb0203bd"
    },
    {
        "target": {
            "file": "lib/copp.h"
        },
        "digest": {
            "line_hashes": [
                "273984248180741880940998914494089443661",
                "203185577382962333624321689680785327007",
                "155368957386231067524344954408589049656",
                "253753055849551589332896634626431003037"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "id": "CVE-2023-3153-d78e6bf9",
        "source": "https://github.com/ovn-org/ovn/commit/9a3f7ed905e525ebdcb14541e775211cbb0203bd"
    },
    {
        "target": {
            "file": "northd/northd.c"
        },
        "digest": {
            "line_hashes": [
                "130994271946306197769789664995555076929",
                "200663036279558230899598810320786448335",
                "257927616725762713937645602867735527471",
                "13358029243250610857060806115376031208",
                "236156749985826493025022585418312343674",
                "295079638578447228654133263734781380464"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "id": "CVE-2023-3153-f4ba0918",
        "source": "https://github.com/ovn-org/ovn/commit/9a3f7ed905e525ebdcb14541e775211cbb0203bd"
    }
]

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-3153.json"