CVE-2019-25076

The TSS (Tuple Space Search) algorithm in Open vSwitch 2.x through 2.17.2 and 3.0.0 allows remote attackers to cause a denial of service (delays of legitimate traffic) via crafted packet data that requires excessive evaluation time within the packet classification algorithm for the MegaFlow cache, aka a Tuple Space Explosion (TSE) attack.

• https://arxiv.org/abs/2011.09107Third Party Advisory
• https://dl.acm.org/citation.cfm?doid=3359989.3365431Third Party Advisory
• https://sites.google.com/view/tuple-space-explosionExploit, Third Party Advisory
• https://www.youtube.com/watch?v=5cHpzVK0D28Exploit, Third Party Advisory
• https://www.youtube.com/watch?v=DSC3m-Bww64Exploit, Third Party Advisory
• https://arxiv.org/abs/2011.09107Third Party Advisory
• https://dl.acm.org/citation.cfm?doid=3359989.3365431Third Party Advisory
• https://sites.google.com/view/tuple-space-explosionExploit, Third Party Advisory
• https://www.youtube.com/watch?v=5cHpzVK0D28Exploit, Third Party Advisory
• https://www.youtube.com/watch?v=DSC3m-Bww64Exploit, Third Party Advisory

Published

Sep 8, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-2507Vulnerability in the MySQL Server component of Oracle MySQL …
• CVE-2019-25070** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in…6.1
• CVE-2019-25071A vulnerability was found in Apple iPhone up to 12.4.1. It h…8.8
• CVE-2019-25072Due to support of Gzip compression in request bodies, as wel…7.5
• CVE-2019-25073Improper path sanitization in github.com/goadesign/goa befor…7.5
• CVE-2019-25075HTML injection combined with path traversal in the Email ser…6.1
• CVE-2019-25078A vulnerability classified as problematic was found in pacpa…7.8
• CVE-2019-25079Rejected reason: This candidate is unused by its CNA.
• CVE-2019-2508Vulnerability in the Oracle VM VirtualBox component of Oracl…
• CVE-2019-25080Rejected reason: This candidate is unused by its CNA.
• CVE-2019-25081Rejected reason: This candidate is unused by its CNA.
• CVE-2019-25082Rejected reason: This candidate is unused by its CNA.