Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local users to delete and overwrite arbitrary files.
CVSS Details
- CVSS 3.1 Base Score: 4.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade openvswitch | Jul 30, 2024 | Aug 7, 2012 |
| Suse | — | Upgrade ovnUpgrade ovn-develUpgrade openvswitch-docUpgrade openvswitch-kmp-defaultUpgrade openvswitch-dpdk-switchUpgrade openvswitch-kmp-xenUpgrade openvswitch-dpdkUpgrade ovn-dockerUpgrade openvswitchUpgrade libovn-26_03-0Upgrade openvswitch-develUpgrade libopenvswitch-2_11-0Upgrade libopenvswitch-3_7-0Upgrade ovn-centralUpgrade openvswitch-switchUpgrade ovn-vtepUpgrade ovn-docUpgrade ovn-hostUpgrade libopenvswitch-2_8-0Upgrade libovn-25_03-0Upgrade python3-openvswitchUpgrade libopenvswitch-3_5-0Upgrade openvswitch-pkiUpgrade openvswitch-vtepUpgrade openvswitch-ipsec | Aug 9, 2024 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub