Threats tagged 'ghsa-q5f5-xxh8-jx9h'

A heap access error vulnerability exists in Open vSwitch when configured with conntrack flows using FTP helpers over the userspace datapath. A remote attacker can send a specially crafted FTP EPASV command exceeding 255 characters, causing a crash and resulting in a denial of service (DoS). This vulnerability is not exploitable in default configurations as the vulnerable feature is not enabled by default.