In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade openvswitch-ovn-hostUpgrade openvswitch-debuginfoUpgrade python-openvswitchUpgrade openvswitch-testUpgrade openvswitch-ovn-commonUpgrade openvswitch-ovn-dockerUpgrade openvswitch-develUpgrade openvswitch-ovn-centralUpgrade openvswitchUpgrade openvswitch-ovn-vtep | Aug 28, 2019 | May 23, 2017 |
| Debian | — | Upgrade openvswitch | Feb 22, 2021 | May 23, 2017 |
| Redhat_linux | — | Upgrade openvswitch-debuginfoUpgrade openvswitch-develUpgrade openvswitch-ovn-centralUpgrade openvswitch-testUpgrade openvswitchUpgrade openvswitch-ovn-dockerUpgrade python-openvswitchUpgrade openvswitch-ovn-vtepUpgrade openvswitch-ovn-commonUpgrade openvswitch-ovn-host | Aug 9, 2017 | May 23, 2017 |
| Suse | — | Upgrade openvswitchUpgrade openvswitch-dpdk-switchUpgrade openvswitch-dpdkUpgrade openvswitch-switch | Feb 4, 2018 | May 23, 2017 |
| Ubuntu | — | Upgrade openvswitch-common | Oct 11, 2017 | May 23, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub