CVE-2019-25076

Katalog CVE

CVSS 5.8 · Medium EPSS 2,3%

Kerentanan pada openvswitch. Skor CVSS 3.1 5.8 (Medium) menurut NVD.

Deskripsi (NVD)

The TSS (Tuple Space Search) algorithm in Open vSwitch 2.x through 2.17.2 and 3.0.0 allows remote attackers to cause a denial of service (delays of legitimate traffic) via crafted packet data that requires excessive evaluation time within the packet classification algorithm for the MegaFlow cache, aka a Tuple Space Explosion (TSE) attack.

Rincian

Terbit di NVD

8 September 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.8 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L · uraikan di kalkulator

EPSS (30 hari)

2,3% peluang dieksploitasi; lebih tinggi dari 83,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://arxiv.org/abs/2011.09107 advisory pihak ketiga
• https://dl.acm.org/citation.cfm?doid=3359989.3365431 advisory pihak ketiga
• https://sites.google.com/view/tuple-space-explosion exploit · advisory pihak ketiga
• https://www.youtube.com/watch?v=5cHpzVK0D28 exploit · advisory pihak ketiga
• https://www.youtube.com/watch?v=DSC3m-Bww64 exploit · advisory pihak ketiga