Bug 869365 (CVE-2019-25076)

Summary:	net-misc/openvswitch: DoS via crafted packet
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	CONFIRMED ---
Severity:	minor	CC:	prometheanfire, virtualization
Priority:	Normal	Keywords:	PullRequest
Version:	unspecified
Hardware:	All
OS:	Linux
See Also:	https://github.com/gentoo/gentoo/pull/34529
Whiteboard:	B3 [??]
Package list:		Runtime testing required:	---

Description John Helmert III archtester

2022-09-09 15:47:17 UTC

CVE-2019-25076 (https://sites.google.com/view/tuple-space-explosion):
https://dl.acm.org/citation.cfm?doid=3359989.3365431
https://arxiv.org/abs/2011.09107
https://www.youtube.com/watch?v=DSC3m-Bww64
https://www.youtube.com/watch?v=5cHpzVK0D28

The TSS (Tuple Space Search) algorithm in Open vSwitch 2.x through 2.17.2 and 3.0.0 allows remote attackers to cause a denial of service (delays of legitimate traffic) via crafted packet data that requires excessive evaluation time within the packet classification algorithm for the MegaFlow cache, aka a Tuple Space Explosion (TSE) attack.

Fixed version isn't apparent to me