Summary
Qian Chen discovered that Open vSwitch incorrectly handled certain
Organization Specific TLVs. A remote attacker could use this issue to cause
Open vSwitch to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | openvswitch | 2.9.8-0ubuntu0.18.04.4 |
| Ubuntu · 20.04 LTS 20.04:LTS | openvswitch | 2.13.8-0ubuntu1.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | openvswitch | 2.17.3-0ubuntu0.22.04.2 |
Vulnerabilities 2
-
Unscored —
An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.
-
Unscored —
An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.