CVE-2023-3153 MEDIUM

CVE-2023-3153: Service monitor mac flow is not rate limited

Vendor Red Hat
Product Fast Datapath for RHEL 7
Weakness CWE-400
Published October 4, 2023
Last update September 19, 2024
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

A flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit. This issue could allow an attacker to cause a denial of service, including on deployments with CoPP enabled and properly configured.

Key dates

02Disclosure timeline

October 4, 2023 CVE published
September 19, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2018-5390 Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service CVE-2024-24750 Backpressure request ignored in fetch() in Undici CVE-2024-56200 Uncontrolled Recursion and Asymmetric Resource Consumption in Altair media/file proxy CVE-2023-2831 Denial of Service while unescaping a Markdown string CVE-2021-41118 ReDoS in DynamicPageList3