8.2
Élevée
CVE-2023-1668 A flaw was found in openvswitch (OVS)
Description
A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| openvswitch | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- www.openwall.com www.openwall.com
- DSA-5387 www.debian.org
- FEDORA-2023-7da03dc2ae lists.fedoraproject.org
- [debian-lts-announce] 20230501 [SECURITY] [DLA 3410-1] openvswitch security update lists.debian.org
- GLSA-202311-16 security.gentoo.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de openvswitch
Les 6 CVE de openvswitch →
CVE-2023-3966
A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a…
7.5
Élevée
CVE-2023-5366
A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass…
7.1
Élevée
CVE-2022-4337
An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch
Non notée
CVE-2022-4338
An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch
Non notée