This vulnerability in Open vSwitch occurs when it is configured with conntrack flow using FTP helpers over the userspace datapath. A remote attacker can send a specially crafted FTP EPASV command exceeding 255 characters, triggering a buffer copy without proper input size validation. This leads to a heap access error causing the affected system to crash, resulting in denial of service. The flaw is identified as CWE-120 (Classic Buffer Overflow). Exploitation requires specific configuration not enabled by default in Red Hat's product. No exploits are known in the wild. The vendor advisory does not confirm a patch or fix but recommends optionally avoiding alg=ftp flows to mitigate the issue.

The vulnerability causes a denial of service by crashing the affected system due to a heap access error triggered by a malformed FTP EPASV command. There is no impact on confidentiality or integrity. Exploitation requires a non-default configuration of Open vSwitch with FTP helpers over the userspace datapath. No known active exploitation has been reported.

Red Hat states that this vulnerability is not exploitable in default configurations. The primary mitigation is to avoid using alg=ftp flows, which are not usually configured by default. There is no official confirmation of a patch or fix at this time. Users should monitor the vendor advisory for updates regarding remediation.