CVE-2020-27827

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

• CWE-400

• https://bugzilla.redhat.com/show_bug.cgi?id=1921438Issue Tracking, Mitigation, Patch, Third Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-941426.pdfPatch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3T5XHPOGIPWCRRPJUE6P3HVC5PTSD5JS/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JYA4AMJXCNF6UPFG36L2TPPT32C242SP/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SKQWHG2SZJZSGC7PXVDAEJYBN7ESDR7D/
• https://mail.openvswitch.org/pipermail/ovs-dev/2021-January/379471.htmlMailing List, Mitigation, Vendor Advisory
• https://security.gentoo.org/glsa/202311-16
• https://us-cert.cisa.gov/ics/advisories/icsa-21-194-07Third Party Advisory, US Government Resource
• https://bugzilla.redhat.com/show_bug.cgi?id=1921438Issue Tracking, Mitigation, Patch, Third Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-941426.pdfPatch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3T5XHPOGIPWCRRPJUE6P3HVC5PTSD5JS/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JYA4AMJXCNF6UPFG36L2TPPT32C242SP/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SKQWHG2SZJZSGC7PXVDAEJYBN7ESDR7D/
• https://mail.openvswitch.org/pipermail/ovs-dev/2021-January/379471.htmlMailing List, Mitigation, Vendor Advisory
• https://security.gentoo.org/glsa/202311-16
• https://us-cert.cisa.gov/ics/advisories/icsa-21-194-07Third Party Advisory, US Government Resource

Published

Mar 18, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-27821A flaw was found in the memory management API of QEMU during…6
• CVE-2020-27822A flaw was found in Wildfly affecting versions 19.0.0.Final,…5.9
• CVE-2020-27823A flaw was found in OpenJPEG’s encoder. This flaw allows an …7.8
• CVE-2020-27824A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_e…5.5
• CVE-2020-27825A use-after-free flaw was found in kernel/trace/ring_buffer.…5.7
• CVE-2020-27826A flaw was found in Keycloak before version 12.0.0 where it …4.2
• CVE-2020-27828There's a flaw in jasper's jpc encoder in versions prior to …7.8
• CVE-2020-27829A heap based buffer overflow in coders/tiff.c may result in …5.5
• CVE-2020-2783Vulnerability in the Oracle Outside In Technology product of…5.3
• CVE-2020-27830A vulnerability was found in Linux Kernel where in the spk_t…5.5
• CVE-2020-27831A flaw was found in Red Hat Quay, where it does not properly…4.3
• CVE-2020-27832A flaw was found in Red Hat Quay, where it has a persistent …9