OpenStack Security Advisory

  1. Bug #1902917
  2. Comment #30

Comment 30 for bug 1902917

Revision history for this message
Slawek Kaplonski (slaweq) wrote : Re: Anti-spoofing bypass using Open vSwitch (CVE-2021-20267)

After some more research I'm not sure if we have any way to fix that issue really as it seems for me that OVS don't allows us to match on tgt field of the ICMPv6 packets and that's where this spoofed IP address is send really in Your example.

If You have any idea on how to fix that, feel free to propose patch for it.