CVE catalog

CVE-2026-34956

A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can send a specially crafted FTP stream with an

[CVE catalog]

Severity
Medium · CVSS 5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.40% · Oct 25, 2026

A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can send a specially crafted FTP stream with an EPASV command exceeding 255 characters. This heap access error can lead to a crash, resulting in a Denial of Service (DoS) for the affected system.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianopenvswitchsid4.0.0-2fixed
Debianopenvswitchforky4.0.0-2fixed
Debianopenvswitchtrixie3.5.0-1vulnerable
Debianopenvswitchbookworm3.1.0-2+deb12u1vulnerable
Debianopenvswitchbookworm-security3.1.0-2+deb12u1vulnerable
CpeopenvswitchNot reportedNot reportedvulnerable
Ubuntuopenvswitchpro2.8.0-0ubuntu2vulnerable
Ubuntuopenvswitchpro2.8.1-0ubuntu2vulnerable
Ubuntuopenvswitchpro2.8.1-0ubuntu3vulnerable
Ubuntuopenvswitchpro2.9.0~git20180205.5a39582ca-0ubuntu1vulnerable
Ubuntuopenvswitchpro2.9.0-0ubuntu1vulnerable
Ubuntuopenvswitchpro2.9.2-0ubuntu0.18.04.2vulnerable
Ubuntuopenvswitchpro2.9.2-0ubuntu0.18.04.3vulnerable
Ubuntuopenvswitchpro2.9.5-0ubuntu0.18.04.1vulnerable
Ubuntuopenvswitchpro2.9.7-0ubuntu0.18.04.2vulnerable
Ubuntuopenvswitchpro2.9.8-0ubuntu0.18.04.2vulnerable
Ubuntuopenvswitchpro2.9.8-0ubuntu0.18.04.3vulnerable
Ubuntuopenvswitchpro2.9.8-0ubuntu0.18.04.4vulnerable
Ubuntuopenvswitchpro2.9.8-0ubuntu0.18.04.5vulnerable
Ubuntuopenvswitchpro2.9.8-0ubuntu0.18.04.5+esm1vulnerable
Ubuntuopenvswitch20.042.12.0-0ubuntu1vulnerable
Ubuntuopenvswitch20.042.12.0-0ubuntu2vulnerable
Ubuntuopenvswitch20.042.12.1~git20191107.7accd1302-0ubuntu1vulnerable
Ubuntuopenvswitch20.042.12.90~git20200107.af683565b-0ubuntu1vulnerable
Ubuntuopenvswitch20.042.12.90~git20200107.af683565b-0ubuntu2vulnerable
Ubuntuopenvswitch20.042.12.90~git20200107.af683565b-0ubuntu3vulnerable
Ubuntuopenvswitch20.042.13.0~git20200127.dbdf66c29-0ubuntu2vulnerable
Ubuntuopenvswitch20.042.13.0~git20200212.15ae9db33-0ubuntu1vulnerable
Ubuntuopenvswitch20.042.13.0~git20200212.15ae9db33-0ubuntu2vulnerable
Ubuntuopenvswitch20.042.13.0-0ubuntu1vulnerable
Ubuntuopenvswitch20.042.13.1-0ubuntu0.20.04.1vulnerable
Ubuntuopenvswitch20.042.13.1-0ubuntu0.20.04.3vulnerable
Ubuntuopenvswitch20.042.13.1-0ubuntu0.20.04.4vulnerable
Ubuntuopenvswitch20.042.13.3-0ubuntu0.20.04.1vulnerable
Ubuntuopenvswitch20.042.13.3-0ubuntu0.20.04.2vulnerable
Ubuntuopenvswitch20.042.13.5-0ubuntu1vulnerable
Ubuntuopenvswitch20.042.13.8-0ubuntu1vulnerable
Ubuntuopenvswitch20.042.13.8-0ubuntu1.1vulnerable
Ubuntuopenvswitch20.042.13.8-0ubuntu1.2vulnerable
Ubuntuopenvswitch20.042.13.8-0ubuntu1.3vulnerable
Ubuntuopenvswitch20.042.13.8-0ubuntu1.4vulnerable
Ubuntuopenvswitch22.042.16.0-0ubuntu2vulnerable
Ubuntuopenvswitch22.042.16.0-0ubuntu3vulnerable
Ubuntuopenvswitch22.042.16.0-0ubuntu4vulnerable
Ubuntuopenvswitch22.042.17.0~git20220105.0d1ffb7-0ubuntu1vulnerable
Ubuntuopenvswitch22.042.17.0~git20220118.1b9fd88-0ubuntu1vulnerable
Ubuntuopenvswitch22.042.17.0~git20220121.109d024-0ubuntu1vulnerable
Ubuntuopenvswitch22.042.17.0-0ubuntu1vulnerable
Ubuntuopenvswitch22.042.17.2-0ubuntu0.22.04.1vulnerable
Ubuntuopenvswitch22.042.17.2-0ubuntu0.22.04.2vulnerable
Ubuntuopenvswitch22.042.17.3-0ubuntu0.22.04.1vulnerable
Ubuntuopenvswitch22.042.17.3-0ubuntu0.22.04.2vulnerable
Ubuntuopenvswitch22.042.17.5-0ubuntu0.22.04.2vulnerable
Ubuntuopenvswitch22.042.17.7-0ubuntu0.22.04.1vulnerable
Ubuntuopenvswitch22.042.17.8-0ubuntu0.22.04.1vulnerable
Ubuntuopenvswitch22.042.17.9-0ubuntu0.22.04.1vulnerable
Ubuntuopenvswitch22.042.17.9-0ubuntu0.22.04.2vulnerable
Ubuntuopenvswitch22.042.17.12-0ubuntu0.22.04.1vulnerable
Ubuntuopenvswitch24.043.2.0-1vulnerable
Ubuntuopenvswitch24.043.2.0-2vulnerable
Ubuntuopenvswitch24.043.2.0-2build1vulnerable
Ubuntuopenvswitch24.043.2.2~git20231029-2vulnerable
Ubuntuopenvswitch24.043.2.2~git20231029-2build1vulnerable
Ubuntuopenvswitch24.043.3.0~git20240118.e802fe7-2vulnerable
Ubuntuopenvswitch24.043.3.0~git20240118.e802fe7-3vulnerable
Ubuntuopenvswitch24.043.3.0-1vulnerable
Ubuntuopenvswitch24.043.3.0-1build1vulnerable
Ubuntuopenvswitch24.043.3.0-1ubuntu1vulnerable
Ubuntuopenvswitch24.043.3.0-1ubuntu3vulnerable
Ubuntuopenvswitch24.043.3.0-1ubuntu3.1vulnerable
Ubuntuopenvswitch24.043.3.0-1ubuntu3.2vulnerable
Ubuntuopenvswitch24.043.3.4-0ubuntu0.24.04.1vulnerable
Ubuntuopenvswitch24.043.3.4-0ubuntu0.24.04.2vulnerable
Ubuntuopenvswitch24.043.3.9-0ubuntu0.24.04.1vulnerable
Ubuntuopenvswitch25.103.5.0-1build1vulnerable
Ubuntuopenvswitch25.103.5.1-0ubuntu1vulnerable
Ubuntuopenvswitch25.103.6.0-1vulnerable
Ubuntuopenvswitch25.103.6.0-2vulnerable
Ubuntuopenvswitch25.103.6.0-2ubuntu0.1vulnerable
Ubuntuopenvswitch26.043.6.0-2vulnerable
Ubuntuopenvswitch26.043.6.0-2build1vulnerable
Ubuntuopenvswitch26.043.6.0-5vulnerable
Ubuntuopenvswitch26.043.6.0-6vulnerable
Ubuntuopenvswitch26.043.6.0-6build1vulnerable
Ubuntuopenvswitch26.043.6.0-6ubuntu2vulnerable
Ubuntuopenvswitch26.043.7.0~git20260211.8c6ebf8-1~1.gbp9127d1vulnerable
Ubuntuopenvswitch26.043.7.0-1vulnerable
Ubuntuopenvswitch26.043.7.0-1build1vulnerable
Ubuntuopenvswitch26.043.7.1-1vulnerable
Ubuntuopenvswitch26.043.7.1-2vulnerable
Suseopenvswitchlinux enterprise server 16.03.5.4-160000.4.1fixed
Suseopenvswitchlinux enterprise server for sap applications 16.03.5.4-160000.4.1fixed
Opensuseopenvswitchleap 16.03.5.4-160000.4.1fixed
Suseopenvswitchlinux micro 6.23.5.4-160000.4.1fixed
Suseopenvswitchlinux micro 6.13.1.7-slfo.1.1_3.1fixed
Suseopenvswitchlinux micro 6.03.1.7-5.1fixed
Suseopenvswitchlinux enterprise server ltss extended security 12 sp52.11.5-3.30.1fixed
Suseopenvswitchlinux enterprise module for package hub 15 sp73.5.4-150700.41.15.1fixed
Suseopenvswitchlinux enterprise module for server applications 15 sp73.5.4-150700.41.15.1fixed
Suseopenvswitch3linux enterprise micro 5.53.1.7-150500.3.28.1fixed
Opensuseopenvswitchtumbleweed3.7.1-33.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianopenvswitchsourcesid3.7.1-1not yet assignedNot reported[1132449]
Debianopenvswitchsourceforky3.7.1-1not yet assignedNot reported[1132449]
Debianopenvswitchsourcetrixie(unfixed)not yet assignedNot reported[1132449]
Debianopenvswitchsourcebookworm(unfixed)not yet assignedNot reported[1132449]
Suseopenvswitchrpmlinux enterprise server 16.03.5.4-160000.4.1Not reportedSUSE-SU-2026:22152-1Not reported
Suseopenvswitchrpmlinux enterprise server for sap applications 16.03.5.4-160000.4.1Not reportedSUSE-SU-2026:22152-1Not reported
Opensuseopenvswitchrpmleap 16.03.5.4-160000.4.1Not reportedOPENSUSE-SU-2026:20972-1Not reported
Suseopenvswitchrpmlinux micro 6.23.5.4-160000.4.1Not reportedSUSE-SU-2026:22145-1Not reported
Suseopenvswitchrpmlinux micro 6.13.1.7-slfo.1.1_3.1Not reportedSUSE-SU-2026:22068-1Not reported
Suseopenvswitchrpmlinux micro 6.03.1.7-5.1Not reportedSUSE-SU-2026:21250-1Not reported
Suseopenvswitchrpmlinux enterprise server ltss extended security 12 sp52.11.5-3.30.1Not reportedSUSE-SU-2026:1482-1Not reported
Suseopenvswitchrpmlinux enterprise module for package hub 15 sp73.5.4-150700.41.15.1Not reportedSUSE-SU-2026:1439-1Not reported
Suseopenvswitchrpmlinux enterprise module for server applications 15 sp73.5.4-150700.41.15.1Not reportedSUSE-SU-2026:1439-1Not reported
Suseopenvswitch3rpmlinux enterprise micro 5.53.1.7-150500.3.28.1Not reportedSUSE-SU-2026:1440-1Not reported
Opensuseopenvswitchrpmtumbleweed3.7.1-33.1Not reportedOPENSUSE-SU-2026:10534-1Not reported

[Debian bug #1132449]

Notes

[trixie] openvswitch: Minor issue; can be fixed via point release [bookworm] openvswitch: Minor issue; can be fixed via point release

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Source package: [openvswitch]

    Details (4)
    • 3.1.0-2+deb12u1 · amd64 · bookworm

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · arm64 · bookworm

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · amd64 · bookworm-security

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · arm64 · bookworm-security

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

  • [openvswitch-doc]Affected

    Source package: [openvswitch]

    Details (4)
    • 3.1.0-2+deb12u1 · all · bookworm

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · all · bookworm

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · all · bookworm-security

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · all · bookworm-security

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

  • Source package: [openvswitch]

    Details (4)
    • 3.1.0-2+deb12u1 · amd64 · bookworm

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · arm64 · bookworm

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · amd64 · bookworm-security

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · arm64 · bookworm-security

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

  • [openvswitch-pki]Affected

    Source package: [openvswitch]

    Details (4)
    • 3.1.0-2+deb12u1 · all · bookworm

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · all · bookworm

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · all · bookworm-security

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · all · bookworm-security

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

  • Source package: [openvswitch]

    Details (4)
    • 3.1.0-2+deb12u1 · all · bookworm

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · all · bookworm

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · all · bookworm-security

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · all · bookworm-security

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

  • Source package: [openvswitch]

    Details (4)
    • 3.1.0-2+deb12u1 · amd64 · bookworm

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · arm64 · bookworm

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · amd64 · bookworm-security

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · arm64 · bookworm-security

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

  • Source package: [openvswitch]

    Details (4)
    • 3.1.0-2+deb12u1 · amd64 · bookworm

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · arm64 · bookworm

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · amd64 · bookworm-security

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · arm64 · bookworm-security

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

  • Source package: [openvswitch]

    Details (4)
    • 3.1.0-2+deb12u1 · all · bookworm

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · all · bookworm

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · all · bookworm-security

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · all · bookworm-security

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

  • Source package: [openvswitch]

    Details (4)
    • 3.1.0-2+deb12u1 · amd64 · bookworm

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · arm64 · bookworm

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · amd64 · bookworm-security

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · arm64 · bookworm-security

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

  • Source package: [openvswitch]

    Details (4)
    • 3.1.0-2+deb12u1 · amd64 · bookworm

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · arm64 · bookworm

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · amd64 · bookworm-security

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · arm64 · bookworm-security

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

  • Source package: [openvswitch]

    Details (4)
    • 3.1.0-2+deb12u1 · amd64 · bookworm

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · arm64 · bookworm

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · amd64 · bookworm-security

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · arm64 · bookworm-security

      Affected

      nvd · openvswitch · debian · bookworm; nvd · openvswitch · debian · 12

[Debian 13 (Trixie)]

  • Source package: [openvswitch]

    Details (2)
    • 3.5.0-1+b1 · amd64 · trixie

      Affected

      nvd · openvswitch · debian · 13

    • 3.5.0-1+b1 · arm64 · trixie

      Affected

      nvd · openvswitch · debian · 13

  • [openvswitch-doc]Affected

    Source package: [openvswitch]

    Details (2)
    • 3.5.0-1 · all · trixie

      Affected

      nvd · openvswitch · debian · 13

    • 3.5.0-1 · all · trixie

      Affected

      nvd · openvswitch · debian · 13

  • Source package: [openvswitch]

    Details (2)
    • 3.5.0-1+b1 · amd64 · trixie

      Affected

      nvd · openvswitch · debian · 13

    • 3.5.0-1+b1 · arm64 · trixie

      Affected

      nvd · openvswitch · debian · 13

  • [openvswitch-pki]Affected

    Source package: [openvswitch]

    Details (2)
    • 3.5.0-1 · all · trixie

      Affected

      nvd · openvswitch · debian · 13

    • 3.5.0-1 · all · trixie

      Affected

      nvd · openvswitch · debian · 13

  • Source package: [openvswitch]

    Details (2)
    • 3.5.0-1 · all · trixie

      Affected

      nvd · openvswitch · debian · 13

    • 3.5.0-1 · all · trixie

      Affected

      nvd · openvswitch · debian · 13

  • Source package: [openvswitch]

    Details (2)
    • 3.5.0-1+b1 · amd64 · trixie

      Affected

      nvd · openvswitch · debian · 13

    • 3.5.0-1+b1 · arm64 · trixie

      Affected

      nvd · openvswitch · debian · 13

  • Source package: [openvswitch]

    Details (2)
    • 3.5.0-1+b1 · amd64 · trixie

      Affected

      nvd · openvswitch · debian · 13

    • 3.5.0-1+b1 · arm64 · trixie

      Affected

      nvd · openvswitch · debian · 13

  • Source package: [openvswitch]

    Details (2)
    • 3.5.0-1 · all · trixie

      Affected

      nvd · openvswitch · debian · 13

    • 3.5.0-1 · all · trixie

      Affected

      nvd · openvswitch · debian · 13

  • Source package: [openvswitch]

    Details (2)
    • 3.5.0-1+b1 · amd64 · trixie

      Affected

      nvd · openvswitch · debian · 13

    • 3.5.0-1+b1 · arm64 · trixie

      Affected

      nvd · openvswitch · debian · 13

Next results

Observed:

References