CVE-2024-2182: ovn Origin Validation Error

CVSS: 6.5v3.1MediumDeferred

AliasesSUSE-SU-2026:0619-1RHSA-2024:1385RHSA-2024:1386+11 more

Published 12-03-2024Last modified 19-10-2026

Vulnerability summary

CVE-2024-2182 is a medium (CVSS 6.5) Origin Validation Error vulnerability in ovn. EPSS estimates a 0.78% chance of exploitation in the next 30 days, higher than 55.4% of scored vulnerabilities.

Overall risk

26/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.5/10

010

Medium · v3.1 (CVE.org)

EPSS score

0.78%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4 · Related 4

SUSE-SU-2026:0280-1 SUSE-SU-2026:0290-1 SUSE-SU-2026:20049-1 SUSE-SU-2026:20061-1

Timeline

12-03-2024
PublishedVulnerability first disclosed.
19-10-2026
Last modifiedVulnerability information updated.

Description

A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service.

CVSS metrics

5 scores · 5 sources · 1 version

v3.16.5

EPSS trend

Probability

0.78%

Chance of exploitation in the next 30 days

Percentile

55%

Versus all other CVEs

30-day change

0.00 pp

From 0.78% on 21-09-2026

21-09-202621-10-2026

EPSS score

0.78%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-346Origin Validation ErrorThe product does not properly verify that the source of data or communication is valid.

Affected systems

Redhat54 products

ovn-2021< 0:21.12.0-142.el8fdp
ovn-2021-central< 0:21.12.0-142.el8fdp
ovn-2021-central-debuginfo< 0:21.12.0-142.el8fdp
ovn-2021-debuginfo< 0:21.12.0-142.el8fdp
ovn-2021-debugsource< 0:21.12.0-142.el8fdp

ovn-2021-host< 0:21.12.0-142.el8fdp
ovn-2021-host-debuginfo< 0:21.12.0-142.el8fdp
ovn-2021-vtep< 0:21.12.0-142.el8fdp
ovn-2021-vtep-debuginfo< 0:21.12.0-142.el8fdp
ovn22.03< 0:22.03.3-71.el8fdp | < 0:22.03.3-71.el9fdp
ovn22.03-central< 0:22.03.3-71.el8fdp | < 0:22.03.3-71.el9fdp
ovn22.03-central-debuginfo< 0:22.03.3-71.el8fdp | < 0:22.03.3-71.el9fdp
ovn22.03-debuginfo< 0:22.03.3-71.el8fdp | < 0:22.03.3-71.el9fdp
ovn22.03-debugsource< 0:22.03.3-71.el8fdp | < 0:22.03.3-71.el9fdp
ovn22.03-host< 0:22.03.3-71.el8fdp | < 0:22.03.3-71.el9fdp
ovn22.03-host-debuginfo< 0:22.03.3-71.el8fdp | < 0:22.03.3-71.el9fdp
ovn22.03-vtep< 0:22.03.3-71.el8fdp | < 0:22.03.3-71.el9fdp
ovn22.03-vtep-debuginfo< 0:22.03.3-71.el8fdp | < 0:22.03.3-71.el9fdp
ovn22.12< 0:22.12.1-94.el8fdp | < 0:22.12.1-94.el9fdp
ovn22.12-central< 0:22.12.1-94.el8fdp | < 0:22.12.1-94.el9fdp
ovn22.12-central-debuginfo< 0:22.12.1-94.el8fdp | < 0:22.12.1-94.el9fdp
ovn22.12-debuginfo< 0:22.12.1-94.el8fdp | < 0:22.12.1-94.el9fdp
ovn22.12-debugsource< 0:22.12.1-94.el8fdp | < 0:22.12.1-94.el9fdp
ovn22.12-host< 0:22.12.1-94.el8fdp | < 0:22.12.1-94.el9fdp
ovn22.12-host-debuginfo< 0:22.12.1-94.el8fdp | < 0:22.12.1-94.el9fdp
ovn22.12-vtep< 0:22.12.1-94.el8fdp | < 0:22.12.1-94.el9fdp
ovn22.12-vtep-debuginfo< 0:22.12.1-94.el8fdp | < 0:22.12.1-94.el9fdp
ovn23.03< 0:23.03.1-100.el8fdp | < 0:23.03.1-100.el9fdp
ovn23.03-central< 0:23.03.1-100.el8fdp | < 0:23.03.1-100.el9fdp
ovn23.03-central-debuginfo< 0:23.03.1-100.el8fdp | < 0:23.03.1-100.el9fdp
ovn23.03-debuginfo< 0:23.03.1-100.el8fdp | < 0:23.03.1-100.el9fdp
ovn23.03-debugsource< 0:23.03.1-100.el8fdp | < 0:23.03.1-100.el9fdp
ovn23.03-host< 0:23.03.1-100.el8fdp | < 0:23.03.1-100.el9fdp
ovn23.03-host-debuginfo< 0:23.03.1-100.el8fdp | < 0:23.03.1-100.el9fdp
ovn23.03-vtep< 0:23.03.1-100.el8fdp | < 0:23.03.1-100.el9fdp
ovn23.03-vtep-debuginfo< 0:23.03.1-100.el8fdp | < 0:23.03.1-100.el9fdp
ovn23.06< 0:23.06.1-112.el8fdp | < 0:23.06.1-112.el9fdp
ovn23.06-central< 0:23.06.1-112.el8fdp | < 0:23.06.1-112.el9fdp
ovn23.06-central-debuginfo< 0:23.06.1-112.el8fdp | < 0:23.06.1-112.el9fdp
ovn23.06-debuginfo< 0:23.06.1-112.el8fdp | < 0:23.06.1-112.el9fdp
ovn23.06-debugsource< 0:23.06.1-112.el8fdp | < 0:23.06.1-112.el9fdp
ovn23.06-host< 0:23.06.1-112.el8fdp | < 0:23.06.1-112.el9fdp
ovn23.06-host-debuginfo< 0:23.06.1-112.el8fdp | < 0:23.06.1-112.el9fdp
ovn23.06-vtep< 0:23.06.1-112.el8fdp | < 0:23.06.1-112.el9fdp
ovn23.06-vtep-debuginfo< 0:23.06.1-112.el8fdp | < 0:23.06.1-112.el9fdp
ovn23.09< 0:23.09.0-136.el9fdp
ovn23.09-central< 0:23.09.0-136.el9fdp
ovn23.09-central-debuginfo< 0:23.09.0-136.el9fdp
ovn23.09-debuginfo< 0:23.09.0-136.el9fdp
ovn23.09-debugsource< 0:23.09.0-136.el9fdp
ovn23.09-host< 0:23.09.0-136.el9fdp
ovn23.09-host-debuginfo< 0:23.09.0-136.el9fdp
ovn23.09-vtep< 0:23.09.0-136.el9fdp
ovn23.09-vtep-debuginfo< 0:23.09.0-136.el9fdp

Show all 54

Debian1 product

ovn< 23.03.1-1~deb12u2 | < 24.03.1-1

Suse1 product

openvswitch&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5< 2.11.5-3.27.1

Ubuntu1 product

ovn< 20.03.2-0ubuntu0.20.04.5 | < 22.03.3-0ubuntu0.22.04.2

4 vendors · 57 products

References

37 links

access.redhat.com/errata/RHSA-2024:1385Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2024:1386Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2024:1387Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2024:1388Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2024:1390Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2024:1391Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2024:1392Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2024:1393Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2024:1394Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2024:4035Vendor AdvisoryX Refsource REDHATAdvisory

Show all 37 references

access.redhat.com/security/cve/CVE-2024-2182VDB EntryX Refsource REDHATREPORT
bugzilla.redhat.com/show_bug.cgi?id=2267840Issue TrackingX Refsource REDHATREPORT
mail.openvswitch.org/pipermail/ovs-announce/2024-March/000346.htmlARTICLE
www.openwall.com/lists/oss-security/2024/03/12/5ARTICLE
www.openwall.com/lists/oss-security/2024/03/12/5X Transferred
lists.fedoraproject.org/archives/…X Transferred
lists.fedoraproject.org/archives/…X Transferred
lists.fedoraproject.org/archives/…X Transferred
www.suse.com/support/update/announcement/2026/suse-su-20260619-1/Advisory
bugzilla.suse.com/1255435REPORT
www.suse.com/security/cve/CVE-2024-2182WEB
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1385.jsonAdvisory
www.cve.org/CVERecord?id=CVE-2024-2182AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2024-2182Advisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1386.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1387.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1388.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1390.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1391.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1392.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1393.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1394.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4035.jsonAdvisory
ubuntu.com/security/CVE-2024-2182REPORT
ubuntu.com/security/notices/USN-6691-1Advisory
security-tracker.debian.org/tracker/CVE-2024-2182Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities