CVE-2020-27827
Summary
| CVE | CVE-2020-27827 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-03-18 17:15:00 UTC |
|---|
| Updated | 2023-11-26 11:15:00 UTC |
|---|
| Description | A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| [SECURITY] Fedora 38 Update: lldpd-1.0.16-1.fc38 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| 1921438 – (CVE-2020-27827) CVE-2020-27827 lldp/openvswitch: denial of service via externally triggered memory leak |
MISC |
bugzilla.redhat.com |
|
| cert-portal.siemens.com/productcert/pdf/ssa-941426.pdf |
CONFIRM |
cert-portal.siemens.com |
|
| [SECURITY] Fedora 37 Update: lldpd-1.0.16-1.fc37 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| [ovs-dev] [ADVISORY] CVE-2020-27827: lldp: Externally triggered memory leak. |
MISC |
mail.openvswitch.org |
|
| Open vSwitch: Multiple Vulnerabilities (GLSA 202311-16) — Gentoo security |
|
security.gentoo.org |
|
| [SECURITY] Fedora 36 Update: lldpd-1.0.16-1.fc36 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| [SECURITY] Fedora 37 Update: lldpd-1.0.16-1.fc37 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| [SECURITY] Fedora 36 Update: lldpd-1.0.16-1.fc36 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| [SECURITY] Fedora 38 Update: lldpd-1.0.16-1.fc38 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| Siemens Industrial Products LLDP | CISA |
MISC |
us-cert.cisa.gov |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 174589 SUSE Enterprise Linux Security Update for openvswitch (SUSE-SU-2021:0300-1)
- 181728 Debian Security Update for lldpd (DLA 3388-1)
- 181730 Debian Security Update for lldpd (DLA 3389-1)
- 239427 Red Hat Update for Red Hat OpenStack Platform 13.0 (RHSA-2021:2456)
- 281603 Fedora Security Update for dpdk (FEDORA-2021-fba11d37ee)
- 283901 Fedora Security Update for lldpd (FEDORA-2023-c0c184a019)
- 283902 Fedora Security Update for lldpd (FEDORA-2023-3e4feeadec)
- 284191 Fedora Security Update for lldpd (FEDORA-2023-88991d2713)
- 501072 Alpine Linux Security Update for lldpd
- 501655 Alpine Linux Security Update for openvswitch
- 505197 Alpine Linux Security Update for openvswitch
- 591139 Siemens Industrial Products LLDP (Update D) Multiple Vulnerabilities (icsa-21-194-07, SSA-941426)
- 710800 Gentoo Linux Open vSwitch Multiple Vulnerabilities (GLSA 202311-16)
- 750374 OpenSUSE Security Update for openvswitch (openSUSE-SU-2021:0239-1)
- 900147 CBL-Mariner Linux Security Update for openvswitch 2.12.0
- 901842 Common Base Linux Mariner (CBL-Mariner) Security Update for lldpd (7284)
- 902651 Common Base Linux Mariner (CBL-Mariner) Security Update for lldpd (10443)
- 903161 Common Base Linux Mariner (CBL-Mariner) Security Update for openvswitch (4019)
- 903813 Common Base Linux Mariner (CBL-Mariner) Security Update for lldpd (10443-1)
