CVE-2026-5367
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Ovn: ovn: information disclosure via crafted dhcpv6 packets
A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could cause the ovn-controller to read beyond the bounds of a packet. This out-of-bounds read can lead to the disclosure of sensitive information stored in heap memory, which is then returned to the attacker's virtual machine port.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Fast Datapath for Red Hat Enterprise Linux 10
- Vendor
- Red Hat
- Product
- Fast Datapath for Red Hat Enterprise Linux 10
- Platforms
- Unknown
- Default status
affected- Package
- ovn25.03
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0:25.03.2-100.el10fdp | unaffected | rpm | * | Unavailable | None listed |
Fast Datapath for Red Hat Enterprise Linux 10
- Vendor
- Red Hat
- Product
- Fast Datapath for Red Hat Enterprise Linux 10
- Platforms
- Unknown
- Default status
affected- Package
- ovn25.09
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0:25.09.2-103.el10fdp | unaffected | rpm | * | Unavailable | None listed |
Fast Datapath for Red Hat Enterprise Linux 8
- Vendor
- Red Hat
- Product
- Fast Datapath for Red Hat Enterprise Linux 8
- Platforms
- Unknown
- Default status
affected- Package
- ovn-2021
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0:21.12.0-145.el8fdp | unaffected | rpm | * | Unavailable | None listed |
Fast Datapath for Red Hat Enterprise Linux 8
- Vendor
- Red Hat
- Product
- Fast Datapath for Red Hat Enterprise Linux 8
- Platforms
- Unknown
- Default status
affected- Package
- ovn23.06
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0:23.06.4-30.el8fdp | unaffected | rpm | * | Unavailable | None listed |
Fast Datapath for Red Hat Enterprise Linux 9
- Vendor
- Red Hat
- Product
- Fast Datapath for Red Hat Enterprise Linux 9
- Platforms
- Unknown
- Default status
affected- Package
- ovn23.06
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0:23.06.4-30.el9fdp | unaffected | rpm | * | Unavailable | None listed |
Fast Datapath for Red Hat Enterprise Linux 9
- Vendor
- Red Hat
- Product
- Fast Datapath for Red Hat Enterprise Linux 9
- Platforms
- Unknown
- Default status
affected- Package
- ovn23.09
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0:23.09.6-16.el9fdp | unaffected | rpm | * | Unavailable | None listed |
Fast Datapath for Red Hat Enterprise Linux 9
- Vendor
- Red Hat
- Product
- Fast Datapath for Red Hat Enterprise Linux 9
- Platforms
- Unknown
- Default status
affected- Package
- ovn24.03
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0:24.03.7-82.el9fdp | unaffected | rpm | * | Unavailable | None listed |
Fast Datapath for Red Hat Enterprise Linux 9
- Vendor
- Red Hat
- Product
- Fast Datapath for Red Hat Enterprise Linux 9
- Platforms
- Unknown
- Default status
affected- Package
- ovn25.03
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0:25.03.2-100.el9fdp | unaffected | rpm | * | Unavailable | None listed |
Fast Datapath for Red Hat Enterprise Linux 9
- Vendor
- Red Hat
- Product
- Fast Datapath for Red Hat Enterprise Linux 9
- Platforms
- Unknown
- Default status
affected- Package
- ovn25.09
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0:25.09.2-103.el9fdp | unaffected | rpm | * | Unavailable | None listed |
Fast Datapath for RHEL 8
- Vendor
- Red Hat
- Product
- Fast Datapath for RHEL 8
- Platforms
- Unknown
- Default status
unaffected- Package
- ovn2.11
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Fast Datapath for RHEL 8
- Vendor
- Red Hat
- Product
- Fast Datapath for RHEL 8
- Platforms
- Unknown
- Default status
unaffected- Package
- ovn2.12
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Fast Datapath for RHEL 8
- Vendor
- Red Hat
- Product
- Fast Datapath for RHEL 8
- Platforms
- Unknown
- Default status
unaffected- Package
- ovn2.13
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Fast Datapath for RHEL 8
- Vendor
- Red Hat
- Product
- Fast Datapath for RHEL 8
- Platforms
- Unknown
- Default status
affected- Package
- ovn23.03
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Fast Datapath for RHEL 9
- Vendor
- Red Hat
- Product
- Fast Datapath for RHEL 9
- Platforms
- Unknown
- Default status
affected- Package
- ovn-2021
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Fast Datapath for RHEL 9
- Vendor
- Red Hat
- Product
- Fast Datapath for RHEL 9
- Platforms
- Unknown
- Default status
affected- Package
- ovn23.03
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
unaffected- Package
- ovn22.06
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
unaffected- Package
- ovn22.09
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
unaffected- Package
- ovn22.12
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
unaffected- Package
- ovn23.03
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
affected- Package
- ovn23.06
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
unaffected- Package
- ovn23.09
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
affected- Package
- ovn24.03
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
affected- Package
- ovn24.09
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
affected- Package
- ovn25.03
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.