-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from a hardcoded IFLA_BR_AGEING_TIME = 0 in the add method of the PyRoute2 class. The commit diff shows this line was removed and made conditional in the patched version. The CVE description explicitly identifies this function as the source of the flaw. The function's behavior directly caused the MAC learning disablement, and the patch introduces an ageing parameter to restore proper control.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| os-vif | pip | >= 1.15.0, < 1.15.2 | 1.15.2 |
| os-vif | pip | = 1.16.0 | 1.17.0 |