OP
Product
Openvswitch
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 7Medium 8Low 0
Watch
Add Openvswitch to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-4338 | 9.8 | Jan 10 | An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch Affected: before 2.13.10; 2.14.0 before 2.14.8; 2.15.0 before 2.15.7; 2.16.0 before 2.16.6; 2.17.0 before 2.17.5; 3.0.0 before 3.0.3 |
| CVE-2022-4337 | 9.8 | Jan 10 | An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch Affected: before 2.13.10; 2.14.0 before 2.14.8; 2.15.0 before 2.15.7; 2.16.0 before 2.16.6; 2.17.0 before 2.17.5; 3.0.0 before 3.0.3 |
| CVE-2017-9265 | 9.8 | May 29 | In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` in the function… Affected: 2.7.0 |
| CVE-2017-9264 | 9.8 | May 29 | In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions… Affected: 2.6.1 |
| CVE-2017-9214 | 9.8 | May 23 | In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the… Affected: 2.7.0 |
| CVE-2016-2074 | 9.8 | Jul 3 | Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted… Affected: 2.2.0; 2.3.0; 2.3.1; 2.3.2; 2.4.0 |
| CVE-2016-10377 | 8.8 | May 29 | In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in `lib/flow.c` in the… Affected: 2.5.0 |
| CVE-2023-3966 | 7.5 | Feb 22 | A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses Affected: before 3.1.0 |
| CVE-2024-22563 | 7.5 | Jan 19 | openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in openvswitch-2.17.8/lib/util.c Affected: 2.17.8 |
| CVE-2021-3905 | 7.5 | Aug 23 | A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing Affected: before 2.17.0 |
| CVE-2020-27827 | 7.5 | Mar 18 | A flaw was found in multiple versions of OpenvSwitch Affected: 2.6.0 before 2.6.9; 2.7.0 before 2.7.12; 2.8.0 before 2.8.10; 2.9.0 before 2.9.8; 2.10.0 before 2.10.6; 2.11.0 before 2.11.5; +3 more |
| CVE-2020-35498 | 7.5 | Feb 11 | A vulnerability was found in openvswitch Affected: 2.5.0 before 2.5.12; 2.6.0 before 2.6.10; 2.7.0 before 2.7.13; 2.8.0 before 2.8.11; 2.9.0 before 2.9.9; 2.10.0 before 2.10.7; +4 more |
| CVE-2018-17205 | 7.5 | Sep 19 | An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting ofproto_rule_insert__ in ofproto/ofproto.c Affected: 2.7.0 through 2.7.6 |
| CVE-2022-0669 | 6.5 | Aug 29 | A flaw was found in dpdk Affected: 2.13.0; 2.15.0 |
| CVE-2017-9263 | 6.5 | May 29 | In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function… Affected: 2.7.0 |
| CVE-2017-14970 | 5.9 | Oct 2 | In lib/ofp-util.c in Open vSwitch (OvS) before 2.8.1, there are multiple memory leaks while parsing malformed OpenFlow group mod messages Affected: through 2.8.0 |
| CVE-2019-25076 | 5.8 | Sep 8 | The TSS (Tuple Space Search) algorithm in Open vSwitch 2.x through 2.17.2 and 3.0.0 allows remote attackers to cause a denial of service (delays of legitimate traffic) via crafted… Affected: 2.0.0 through 2.17.2; 3.0.0 |
| CVE-2023-5366 | 5.5 | Oct 6 | A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules Affected: before 2023-02-28 |
| CVE-2021-36980 | 5.5 | Jul 20 | Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a… Affected: 2.11.0 through 2.15.0 |
| CVE-2018-17206 | 4.9 | Sep 19 | An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6 Affected: 2.7.0 through 2.7.6 |
| CVE-2018-17204 | 4.3 | Sep 19 | An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting parse_group_prop_ntr_selection_method in lib/ofp-util.c Affected: 2.7.0 through 2.7.6 |
| CVE-2012-3449 | – | Aug 7 | Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local… Affected: 1.4.2 |
Showing 22