CVE-2017-4920
Medium
Description
The implementation of the OSPF protocol in VMware NSX-V Edge 6.2.x prior to 6.2.8 and NSX-V Edge 6.3.x prior to 6.3.3 doesn't correctly handle the link-state advertisement (LSA). A rogue LSA may exploit this issue resulting in continuous sending of LSAs between two routers eventually going in loop or loss of connectivity.
SeverityMedium
CVSS5.9
Exploit probability—
Product
Vmware Nsx-v Edge
PublishedDec 5, 2017
First seenDec 5, 2017
How to fix
Update
- vmware nsx-v_edge6.2.8, 6.3.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vmware nsx-v_edge | 6.2.0 ≤ v < 6.2.8, 6.3.0 ≤ v < 6.3.3 | 6.2.8, 6.3.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.