Red Hat Security Advisory: openvswitch security update

Fixed packages 3

Vulnerabilities 3

• Unscored —
  CVE-2017-9214

  In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-…

  openvswitch openvswitch Debian Ubuntu
  May 23, 2017
• Unscored —
  CVE-2017-9263

  In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for…

  openvswitch openvswitch Debian Ubuntu
  May 29, 2017
• Unscored —
  CVE-2017-9265

  In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the co…

  openvswitch openvswitch Debian Ubuntu
  May 29, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1431494
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1456795
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1457327
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1457335
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2553.json
• report
  https://access.redhat.com/security/cve/CVE-2017-9214
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-9214
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-9214
• report
  https://access.redhat.com/security/cve/CVE-2017-9263
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-9263
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-9263
• report
  https://access.redhat.com/security/cve/CVE-2017-9265
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-9265
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-9265