← Database

CVE-2026-34956

MEDIUM CVSS: 5.9 Published: 2026-05-05 Modified: 2026-06-17

Description

A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can send a specially crafted FTP stream with an EPASV command exceeding 255 characters. This heap access error can lead to a crash, resulting in a Denial of Service (DoS) for the affected system.

Affected Platforms

Unknown

Weakness Type

CWE-120

References