CVE-2026-5367 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with…
High CVSS: 8.6

CVE-2026-5367

A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could cause the ovn-controller to read beyond the bounds of a packet. This out-of-bounds read can lead to the disclosure of sensitive information stored in heap memory, which is then returned to the attacker's virtual machine port.
Vendor
-
Product
-
CWE
CWE-130
Yayın Tarihi
2026-04-24 13:16:21
Güncelleme
2026-04-24 14:39:28
Source Identifier
secalert@redhat.com
KEV Date Added
-

Kategoriler

Referanslar