CVE-2023-3153

A flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit. This issue could allow an attacker to cause a denial of service, including on deployments with CoPP enabled and properly configured.

• CWE-400
• CWE-770

• https://access.redhat.com/security/cve/CVE-2023-3153Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2213279Issue Tracking
• https://github.com/ovn-org/ovn/commit/9a3f7ed905e525ebdcb14541e775211cbb0203bdPatch
• https://github.com/ovn-org/ovn/issues/198Issue Tracking
• https://mail.openvswitch.org/pipermail/ovs-announce/2023-August/000327.htmlMitigation, Patch
• https://mail.openvswitch.org/pipermail/ovs-dev/2023-August/407553.htmlPatch
• https://access.redhat.com/security/cve/CVE-2023-3153Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2213279Issue Tracking
• https://github.com/ovn-org/ovn/commit/9a3f7ed905e525ebdcb14541e775211cbb0203bdPatch
• https://github.com/ovn-org/ovn/issues/198Issue Tracking
• https://mail.openvswitch.org/pipermail/ovs-announce/2023-August/000327.htmlMitigation, Patch
• https://mail.openvswitch.org/pipermail/ovs-dev/2023-August/407553.htmlPatch

Published

Oct 4, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-31517A memory leak in the component CConsole::Chain of Teeworlds …7.5
• CVE-2023-31518A heap use-after-free in the component CDataFileReader::GetI…5.5
• CVE-2023-31519Pharmacy Management System v1.0 was discovered to contain a …9.8
• CVE-2023-3152A vulnerability classified as critical has been found in Sou…8.8
• CVE-2023-31528Motorola CX2L Router 1.0.1 was discovered to contain a comma…8.8
• CVE-2023-31529Motorola CX2L Router 1.0.1 was discovered to contain a comma…8.8
• CVE-2023-31530Motorola CX2L Router 1.0.1 was discovered to contain a comma…8.8
• CVE-2023-31531Motorola CX2L Router 1.0.1 was discovered to contain a comma…8.8
• CVE-2023-3154The WordPress Gallery Plugin WordPress plugin before 3.39 is…7.5
• CVE-2023-31541A unrestricted file upload vulnerability was discovered in t…9.8
• CVE-2023-31543A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows a…9.8
• CVE-2023-31544A stored cross-site scripting (XSS) vulnerability in alkacon…5.4