Skip to content
OpenAdvisories
Medium USN-5698-1 1 CVE

openvswitch vulnerability

Published Oct 25, 2022 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Open vSwitch incorrectly handled comparison of
certain minimasks. A remote attacker could use this issue to cause Open
vSwitch to crash, resulting in a denial of service, or possibly execute
arbitrary code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS openvswitch 2.9.8-0ubuntu0.18.04.3

Vulnerabilities 1

  • Medium 6.1
    CVE-2022-32166

    ovs - buffer over-read

    In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modificati…

    ovs ovs openvswitch openvswitch Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2022-32166