{
  "cveId": "CVE-2023-3152",
  "url": "https://patchblox.com/security/cve/CVE-2023-3152",
  "summary": "CVE-2023-3152 is fixed in 2 products on 1 platform, first by SUSE-SU-2026:0280-1, released January 23, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "openvswitch: This update for openvswitch fixes the following issues:\n\nUpdate to v3.1.7:\n\n - CVE-2023-3966: openvswitch, openvswitc...",
  "description": "This update for openvswitch fixes the following issues:\n\nUpdate to v3.1.7:\n\n - CVE-2023-3966: openvswitch, openvswitch3: Invalid memory access in Geneve with HW offload (bsc#1219465).\n - CVE-2024-2182: openvswitch: ov: insufficient validation of incoming BFD packets may lead to denial of service (bsc#1255435).\n - CVE-2023-1668: openvswitch: remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054).\n - CVE-2023-3153: openvswitch,openvswitch3: service monitor MAC flow is not rate limited (bsc#1212125).\n - CVE-2023-5366: openvswitch: missing masks on a final stage with ports trie (bsc#1216002).",
  "published": "2026-01-23T15:33:56Z",
  "severity": "",
  "epss": 0.00839,
  "epssPercentile": 0.58121,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "openvswitch",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "3.1.7-150600.33.9.1",
      "fix": "SUSE-SU-2026:0280-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0280-1",
      "released": "2026-01-23T15:33:56Z"
    },
    {
      "platform": "linux",
      "product": "openvswitch",
      "release": "sles 15.6",
      "fixedVersion": "3.1.7-150600.33.9.1",
      "fix": "SUSE-SU-2026:0280-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0280-1",
      "released": "2026-01-23T15:33:56Z"
    },
    {
      "platform": "linux",
      "product": "openvswitch3",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "3.1.7-150500.3.25.1",
      "fix": "SUSE-SU-2026:0290-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0290-1",
      "released": "2026-01-26T10:34:13Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-10T20:03:11Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}