A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openvswitch | Aug 22, 2024 | Apr 10, 2023 |
| Centos_linux | — | Upgrade openvswitch2.17-testUpgrade openvswitch2.15Upgrade openvswitch2.13-testUpgrade network-scripts-openvswitch2.17Upgrade openvswitch2.15-develUpgrade openvswitch3.1-ipsecUpgrade openvswitch2.17-debugsourceUpgrade python3-openvswitch3.1Upgrade python3-openvswitch2.17Upgrade python3-openvswitch2.15Upgrade openvswitch2.13-ipsecUpgrade network-scripts-openvswitch3.1Upgrade python3-openvswitch2.13-debuginfoUpgrade openvswitch2.13-debuginfoUpgrade openvswitch2.17-debuginfoUpgrade openvswitch2.15-debuginfoUpgrade openvswitch2.13-debugsourceUpgrade network-scripts-openvswitch2.15Upgrade openvswitch3.1-debuginfoUpgrade openvswitch3.1Upgrade openvswitch2.13Upgrade network-scripts-openvswitch2.13Upgrade openvswitch2.15-ipsecUpgrade openvswitch3.1-testUpgrade openvswitch2.17-develUpgrade python3-openvswitch3.1-debuginfoUpgrade openvswitch2.15-debugsourceUpgrade openvswitch2.17Upgrade openvswitch2.13-develUpgrade openvswitch3.1-develUpgrade openvswitch2.15-testUpgrade openvswitch2.17-ipsecUpgrade python3-openvswitch2.13Upgrade openvswitch3.1-debugsourceUpgrade python3-openvswitch2.17-debuginfoUpgrade python3-openvswitch2.15-debuginfo | Apr 14, 2023 | Apr 10, 2023 |
| Debian | — | Upgrade openvswitch | Apr 17, 2023 | Apr 10, 2023 |
| Gentoo Linux | — | Upgrade net-misc/openvswitch. | Nov 27, 2023 | Apr 10, 2023 |
| Redhat_linux | — | Upgrade openvswitch2.15-debugsourceUpgrade network-scripts-openvswitch3.1Upgrade openvswitch2.15-ipsecUpgrade python3-openvswitch2.15Upgrade openvswitch2.17-develUpgrade openvswitch2.17-debuginfoUpgrade python3-openvswitch3.1-debuginfoUpgrade openvswitch3.1-develUpgrade python3-openvswitch2.13Upgrade network-scripts-openvswitch2.15Upgrade openvswitch2.17-testUpgrade python3-openvswitch2.17Upgrade openvswitch2.17-ipsecUpgrade openvswitch2.13-develUpgrade network-scripts-openvswitch2.13Upgrade openvswitch2.13No solution existsUpgrade openvswitch2.13-debugsourceUpgrade python3-openvswitch2.15-debuginfoUpgrade openvswitch3.1-ipsecUpgrade openvswitch2.17Upgrade openvswitch3.1-debugsourceUpgrade python3-openvswitch2.13-debuginfoUpgrade openvswitch2.15-debuginfoUpgrade openvswitch2.15Upgrade openvswitch2.13-ipsecUpgrade openvswitch2.15-testUpgrade openvswitch2.13-debuginfoUpgrade openvswitch3.1-testUpgrade python3-openvswitch2.17-debuginfoUpgrade openvswitch2.15-develUpgrade python3-openvswitch3.1Upgrade openvswitch2.13-testUpgrade openvswitch3.1-debuginfoUpgrade openvswitch2.17-debugsourceUpgrade network-scripts-openvswitch2.17Upgrade openvswitch3.1 | Apr 14, 2023 | Apr 10, 2023 |
| Suse | — | Upgrade libopenvswitch-2_14-0Upgrade libopenvswitch-3_1-0Upgrade ovn3-hostUpgrade openvswitch-testUpgrade ovn3-dockerUpgrade ovn3-centralUpgrade openvswitch3-develUpgrade openvswitch3Upgrade ovn-develUpgrade openvswitch3-ipsecUpgrade libovn-23_03-0Upgrade openvswitch-ipsecUpgrade ovn3-docUpgrade ovn-hostUpgrade ovn3Upgrade ovn3-vtepUpgrade openvswitch-vtepUpgrade openvswitch3-vtepUpgrade python3-ovsUpgrade ovn-dockerUpgrade ovnUpgrade ovn-docUpgrade openvswitch3-docUpgrade ovn-centralUpgrade openvswitch3-testUpgrade libopenvswitch-2_13-0Upgrade python3-ovs3Upgrade ovn3-develUpgrade ovn-vtepUpgrade openvswitch-pkiUpgrade openvswitch-develUpgrade openvswitchUpgrade libovn-20_03-0Upgrade openvswitch3-pkiUpgrade libovn-20_06-0Upgrade libopenvswitch-2_11-0Upgrade openvswitch-doc | May 24, 2023 | Apr 10, 2023 |
| Ubuntu | — | Upgrade openvswitch-commonUpgrade python3-openvswitchUpgrade python-openvswitch | May 11, 2023 | Apr 10, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub