OP
Product
Openvswitch
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 7Medium 8Low 0
Watch
Add Openvswitch to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-0669 | 6.5 | Aug 29 | A flaw was found in dpdk Affected: 2.13.0; 2.15.0 |
| CVE-2017-9263 | 6.5 | May 29 | In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function… Affected: 2.7.0 |
| CVE-2017-14970 | 5.9 | Oct 2 | In lib/ofp-util.c in Open vSwitch (OvS) before 2.8.1, there are multiple memory leaks while parsing malformed OpenFlow group mod messages Affected: through 2.8.0 |
| CVE-2019-25076 | 5.8 | Sep 8 | The TSS (Tuple Space Search) algorithm in Open vSwitch 2.x through 2.17.2 and 3.0.0 allows remote attackers to cause a denial of service (delays of legitimate traffic) via crafted… Affected: 2.0.0 through 2.17.2; 3.0.0 |
| CVE-2023-5366 | 5.5 | Oct 6 | A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules Affected: before 2023-02-28 |
| CVE-2021-36980 | 5.5 | Jul 20 | Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a… Affected: 2.11.0 through 2.15.0 |
| CVE-2018-17206 | 4.9 | Sep 19 | An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6 Affected: 2.7.0 through 2.7.6 |
| CVE-2018-17204 | 4.3 | Sep 19 | An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting parse_group_prop_ntr_selection_method in lib/ofp-util.c Affected: 2.7.0 through 2.7.6 |
Showing 8