CVE-2026-5367 - Vulnerability Analysis

Overview

OVN (Open Virtual Network) contains an out-of-bounds read caused by crafted DHCPv6 SOLICIT packets with inflated Client ID length, letting remote attackers disclose sensitive heap memory information, exploit requires network access.

Severity & Score

Impact

Remote attackers can disclose sensitive heap memory information, potentially leaking confidential data.

Mitigation

Update to the latest version of OVN.

References

• https://access.redhat.com/security/cve/CVE-2026-5367
• https://bugzilla.redhat.com/show_bug.cgi?id=2455863
• http://www.openwall.com/lists/oss-security/2026/04/20/3
• http://www.openwall.com/lists/oss-security/2026/04/20/5

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner