CVE-2021-36980

Name of the Vulnerable Software and Affected Versions Open vSwitch versions 2.11.0 through 2.15.0

Description The issue is related to a use-after-free error in the decode NXAST RAW ENCAP() function of Open vSwitch. This error occurs during the decoding of a RAW ENCAP action and can be exploited by a remote attacker to execute arbitrary code. The decode NXAST RAW ENCAP() function is called from ofpact decode and ofpacts decode.

Recommendations For Open vSwitch versions 2.11.0 through 2.15.0, consider disabling the decode NXAST RAW ENCAP() function as a temporary workaround until a patch is available. Restrict access to the ofpact decode and ofpacts decode functions to minimize the risk of exploitation. Avoid using the RAW ENCAP action in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.