Skip to content
OpenAdvisories
Medium USN-5698-2 1 CVE

openvswitch vulnerability

Published Oct 25, 2022 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

USN-5698-1 fixed a vulnerability in Open. This update provides
the corresponding update for Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that Open vSwitch incorrectly handled comparison of
certain minimasks. A remote attacker could use this issue to cause Open
vSwitch to crash, resulting in a denial of service, or possibly execute
arbitrary code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS openvswitch 2.5.9-0ubuntu0.16.04.3+esm1

Vulnerabilities 1

  • Medium 6.1
    CVE-2022-32166

    ovs - buffer over-read

    In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modificati…

    ovs ovs openvswitch openvswitch Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2022-32166