CVE-2023-5366

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-345

Affected software

VendorProductVersions
n/aopenvswitch—
Red HatFast Datapath for RHEL 7—
Red HatFast Datapath for RHEL 7—
Red HatFast Datapath for RHEL 7—
Red HatFast Datapath for RHEL 7—
Red HatFast Datapath for RHEL 7—
Red HatFast Datapath for RHEL 7—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatRed Hat Enterprise Linux 7—
Red HatRed Hat OpenShift Container Platform 3.11—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenStack Platform 16.1—
Red HatRed Hat OpenStack Platform 16.2—
Red HatRed Hat Virtualization 4—
Red HatRed Hat Virtualization 4—
FedoraFedora—

References

Timeline

Published
Oct 6, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-536605.5In the Linux kernel, the following vulnerability has been resolved: bpf, cpumap: Handle skb as well when clean up ptr_ring The following wCVE-2023-536615.5In the Linux kernel, the following vulnerability has been resolved: bnxt: avoid overflow in bnxt_get_nvram_directory() The value of an ariCVE-2023-536625.5In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} ICVE-2023-536635.5In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Check instead of asserting on nested TSC scaling support ChCVE-2023-536645.5In the Linux kernel, the following vulnerability has been resolved: OPP: Fix potential null ptr dereference in dev_pm_opp_get_required_pstaCVE-2023-536655.5In the Linux kernel, the following vulnerability has been resolved: md: don't dereference mddev after export_rdev() Except for initial refCVE-2023-536665.5In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd938x: fix missing mbhc init error handling MBHC initiCVE-2023-536675.5In the Linux kernel, the following vulnerability has been resolved: net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize Currently inCVE-2023-536687.1In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix deadloop issue on reading trace_pipe Soft lockup occuCVE-2023-536695.5In the Linux kernel, the following vulnerability has been resolved: tcp: fix skb_copy_ubufs() vs BIG TCP David Ahern reported crashes in sCVE-2023-53677.8A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copyiCVE-2023-536705.5In the Linux kernel, the following vulnerability has been resolved: nvme-core: fix dev_pm_qos memleak Call dev_pm_qos_hide_latency_toleran
CVE-2023-5366: Medium severity, CVSS 5.5 | Vulnix