CVE-2025-0650

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

VendorProductVersions
———
Red HatFast Datapath for Red Hat Enterprise Linux 8—
Red HatFast Datapath for Red Hat Enterprise Linux 8—
Red HatFast Datapath for Red Hat Enterprise Linux 8—
Red HatFast Datapath for Red Hat Enterprise Linux 8—
Red HatFast Datapath for Red Hat Enterprise Linux 8—
Red HatFast Datapath for Red Hat Enterprise Linux 8—
Red HatFast Datapath for Red Hat Enterprise Linux 9—
Red HatFast Datapath for Red Hat Enterprise Linux 9—
Red HatFast Datapath for Red Hat Enterprise Linux 9—
Red HatFast Datapath for Red Hat Enterprise Linux 9—
Red HatFast Datapath for Red Hat Enterprise Linux 9—
Red HatFast Datapath for Red Hat Enterprise Linux 9—
Red HatFast Datapath for Red Hat Enterprise Linux 9—
Red HatFast Datapath for Red Hat Enterprise Linux 9—
Red HatFast Datapath for Red Hat Enterprise Linux 9—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenShift Container Platform 4—

References

Timeline

Published
Jan 23, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-06517.1Improper Privilege Management vulnerability in Cloudflare WARP on Windows allows File Manipulation. User with a low system privileges  can CVE-2025-06526.5An issue has been discovered in GitLab EE/CE affecting all versions starting from 16.9 before 17.7.7, all versions starting from 17.8 beforeCVE-2025-06566.1IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed aCVE-2025-06578.8A weakness in Automated Logic and Carrier i-Vu Gen5 router on driver version drv_gen5_106-01-2380, allows malformed packets to be sent CVE-2025-06588.7A vulnerability in Automated Logic and Carrier's Zone Controller via BACnet protocol causes the device to crash. The device enters a fault sCVE-2025-06597.0A path traversal vulnerability exists in the Rockwell Automation DataEdge Platform DataMosaix Private Cloud. By specifying the character seqCVE-2025-06604.8Concrete CMS versions 9.0.0 through 9.3.9 are affected by a stored XSS in Folder Function.The "Add Folder" functionality lacks input sanitizCVE-2025-06614.3The DethemeKit For Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the dCVE-2025-06624.9In some cases, the ktrace facility will log the contents of kernel structures to userspace. In one such case, ktrace dumps a variable-sizedCVE-2025-06636.8A cross-tenant authentication vulnerability exists in multiple WSO2 products due to improper cryptographic design in Adaptive AuthenticationCVE-2025-06646.7A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent to load an arbitrarCVE-2025-06657.0libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded n
CVE-2025-0650: High severity, CVSS 8.1 | Vulnix