ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

Vulnerability managementShadowTrackr CVSS score
← Back to results

CVE-2020-27827

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.
An official patch is available. Apply the patch as soon as possible.
7.5
CVSS
6.9
ShadowTrackr
NO
CISA KEV
-
NCSC.nl
CVSS v4.0 Metrics
Exploitability
Attack VectorNetwork
ComplexityLow
RequirementsPresent
PrivilegesNone
User InteractionNone
Threat
Exploit MaturityPoC
Vulnerable System
ConfidentialityNone
IntegrityNone
AvailabilityHigh
Subsequent System
ConfidentialityNone
IntegrityNone
AvailabilityNone
Supplemental
SafetyNegligible
AutomatableYes
RecoveryAutomatic
Value DensityConcentrated
UrgencyMedium
Patch StatusOfficial Patch

Change Log
DateSourceChangesScore
2026-07-21PoCE: U→P4.6 → 6.9
2026-07-21nvdpatch: Unavailable→Official Patch4.6 → 4.6
2026-07-21cve.orginitial, patch: Unavailable4.6
References: CVE.org · NVD · PoC

Affected Software
VendorProductVersion
fedoraprojectfedora33
lldpd_projectlldpd< 1.0.8
n/alldp/openvswitchlldpd 1.0.8, openvswitch 2.14.1, openvswitch 2.13.2, openvswitch 2.12.2, openvswitch 2.11.5, openvswitch 2.10.6, openvswitch 2.9
openvswitchopenvswitch≥ 2.10.0, < 2.10.6
openvswitchopenvswitch≥ 2.11.0, < 2.11.5
openvswitchopenvswitch≥ 2.12.0, < 2.12.2
openvswitchopenvswitch≥ 2.13.0, < 2.13.2
openvswitchopenvswitch≥ 2.14.0, < 2.14.1
openvswitchopenvswitch≥ 2.6.0, < 2.6.9
openvswitchopenvswitch≥ 2.7.0, < 2.7.12
openvswitchopenvswitch≥ 2.8.0, < 2.8.10
openvswitchopenvswitch≥ 2.9.0, < 2.9.8
redhatenterprise_linux7.0
redhatenterprise_linux8.0
redhatopenshift_container_platform4.0
redhatopenstack10
redhatopenstack13
redhatvirtualization4.0
siemenssimatic_hmi_unified_comfort_panels_firmware< 17
siemenssimatic_net_cp_1243-1_firmwareAll versions
siemenssimatic_net_cp_1243-8_irc_firmwareAll versions
siemenssimatic_net_cp_1542sp-1_firmwareAll versions
siemenssimatic_net_cp_1542sp-1_irc_firmwareAll versions
siemenssimatic_net_cp_1543-1_firmwareAll versions
siemenssimatic_net_cp_1543sp-1_firmwareAll versions
siemenssimatic_net_cp_1545-1_firmwareAll versions
siemenssinumerik_one_firmware< 2.0.1
siemenstim_1531_irc_firmware≥ 2.2
Published: 2021-03-18