A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openvswitch | Aug 22, 2024 | Apr 10, 2023 |
| Centos_linux | — | Upgrade python3-openvswitch2.17Upgrade openvswitch2.15-develUpgrade python3-openvswitch2.15Upgrade python3-openvswitch2.13-debuginfoUpgrade python3-openvswitch3.1Upgrade openvswitch2.13-ipsecUpgrade openvswitch2.17-debuginfoUpgrade openvswitch2.13-debuginfoUpgrade openvswitch2.15-debuginfoUpgrade openvswitch3.1-ipsecUpgrade openvswitch2.17-debugsourceUpgrade openvswitch2.13-testUpgrade network-scripts-openvswitch3.1Upgrade openvswitch2.17-testUpgrade network-scripts-openvswitch2.17Upgrade openvswitch2.15Upgrade network-scripts-openvswitch2.15Upgrade openvswitch3.1-debugsourceUpgrade openvswitch3.1Upgrade openvswitch2.17-ipsecUpgrade python3-openvswitch2.13Upgrade openvswitch2.15-ipsecUpgrade openvswitch2.15-testUpgrade openvswitch3.1-testUpgrade python3-openvswitch2.17-debuginfoUpgrade openvswitch3.1-develUpgrade openvswitch2.13-develUpgrade python3-openvswitch3.1-debuginfoUpgrade openvswitch2.15-debugsourceUpgrade openvswitch2.13Upgrade network-scripts-openvswitch2.13Upgrade openvswitch2.17-develUpgrade python3-openvswitch2.15-debuginfoUpgrade openvswitch2.13-debugsourceUpgrade openvswitch3.1-debuginfoUpgrade openvswitch2.17 | Apr 14, 2023 | Apr 10, 2023 |
| Debian | — | Upgrade openvswitch | Apr 17, 2023 | Apr 10, 2023 |
| Gentoo Linux | — | Upgrade net-misc/openvswitch. | Nov 27, 2023 | Apr 10, 2023 |
| Redhat_linux | — | Upgrade network-scripts-openvswitch3.1Upgrade openvswitch3.1-debugsourceUpgrade openvswitch2.13Upgrade openvswitch2.13-debugsourceUpgrade openvswitch3.1-ipsecUpgrade python3-openvswitch2.13Upgrade openvswitch2.17-ipsecUpgrade openvswitch2.17-testUpgrade openvswitch2.15-debugsourceUpgrade python3-openvswitch2.17Upgrade python3-openvswitch2.15-debuginfoUpgrade openvswitch2.17-develUpgrade openvswitch2.17-debuginfoUpgrade python3-openvswitch3.1-debuginfoUpgrade openvswitch2.15-ipsecUpgrade python3-openvswitch2.15Upgrade openvswitch2.13-develNo solution existsUpgrade network-scripts-openvswitch2.15Upgrade network-scripts-openvswitch2.13Upgrade openvswitch3.1-develUpgrade openvswitch2.17Upgrade openvswitch3.1-testUpgrade openvswitch2.15-testUpgrade openvswitch3.1-debuginfoUpgrade network-scripts-openvswitch2.17Upgrade openvswitch2.17-debugsourceUpgrade openvswitch2.13-testUpgrade openvswitch3.1Upgrade openvswitch2.13-ipsecUpgrade python3-openvswitch2.13-debuginfoUpgrade openvswitch2.15Upgrade openvswitch2.15-debuginfoUpgrade openvswitch2.13-debuginfoUpgrade openvswitch2.15-develUpgrade python3-openvswitch2.17-debuginfoUpgrade python3-openvswitch3.1 | Apr 14, 2023 | Apr 10, 2023 |
| Suse | — | Upgrade libopenvswitch-2_14-0Upgrade openvswitch3Upgrade libovn-23_03-0Upgrade ovn3-docUpgrade openvswitch-testUpgrade openvswitch3-ipsecUpgrade ovn-hostUpgrade ovn3-dockerUpgrade ovn3-hostUpgrade ovn3Upgrade ovn3-centralUpgrade openvswitch-ipsecUpgrade ovn3-vtepUpgrade openvswitch3-develUpgrade libopenvswitch-3_1-0Upgrade ovn-develUpgrade libopenvswitch-2_11-0Upgrade libovn-20_03-0Upgrade openvswitch-develUpgrade libovn-20_06-0Upgrade openvswitch3-pkiUpgrade ovn-docUpgrade openvswitch3-docUpgrade ovn-vtepUpgrade openvswitch-vtepUpgrade openvswitchUpgrade openvswitch-docUpgrade openvswitch3-vtepUpgrade openvswitch3-testUpgrade libopenvswitch-2_13-0Upgrade python3-ovs3Upgrade python3-ovsUpgrade ovn-centralUpgrade ovn3-develUpgrade openvswitch-pkiUpgrade ovnUpgrade ovn-docker | May 24, 2023 | Apr 10, 2023 |
| Ubuntu | — | Upgrade python-openvswitchUpgrade python3-openvswitchUpgrade openvswitch-common | May 11, 2023 | Apr 10, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub