Red Hat Security Advisory: openvswitch security and bug fix update

Fixed packages 3

Vulnerabilities 4

• Unscored —
  CVE-2017-9214

  In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-…

  openvswitch openvswitch Debian Ubuntu
  May 23, 2017
• Unscored —
  CVE-2017-9263

  In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for…

  openvswitch openvswitch Debian Ubuntu
  May 29, 2017
• Unscored —
  CVE-2017-9264

  In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsin…

  openvswitch Debian
  May 29, 2017
• Unscored —
  CVE-2017-9265

  In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the co…

  openvswitch openvswitch Debian Ubuntu
  May 29, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1431490
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1436610
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1456795
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1457327
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1457329
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1457335
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1463732
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1468334
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1468631
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1468751
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1472334
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1472335
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1473735
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2648.json
• report
  https://access.redhat.com/security/cve/CVE-2017-9214
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-9214
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-9214
• report
  https://access.redhat.com/security/cve/CVE-2017-9263
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-9263
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-9263
• report
  https://access.redhat.com/security/cve/CVE-2017-9264
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-9264
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-9264
• report
  https://access.redhat.com/security/cve/CVE-2017-9265
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-9265
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-9265