VULNERABILITY INTELLIGENCE

CVE-2021-3905

CVSS score7.5 HIGH
EPSS probability2.13%
CISA KEVNot currently listed
Published2022-08-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments.

Weakness classification

  • secalert@redhat.com: CWE-401
  • nvd@nist.gov: CWE-401

Primary references