8.2
High
CVE-2023-1668 A flaw was found in openvswitch (OVS)
Description
A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| openvswitch | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- www.openwall.com www.openwall.com
- DSA-5387 www.debian.org
- FEDORA-2023-7da03dc2ae lists.fedoraproject.org
- [debian-lts-announce] 20230501 [SECURITY] [DLA 3410-1] openvswitch security update lists.debian.org
- GLSA-202311-16 security.gentoo.org
Timeline
- Published
- Last modified
Other CVEs of openvswitch
The 6 CVEs of openvswitch →
CVE-2023-3966
A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a…
7.5
High
CVE-2023-5366
A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass…
7.1
High
CVE-2022-4337
An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch
Not rated
CVE-2022-4338
An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch
Not rated