A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openvswitch | Aug 22, 2024 | Apr 10, 2023 |
| Centos_linux | — | Upgrade python3-openvswitch3.1-debuginfoUpgrade openvswitch2.17Upgrade python3-openvswitch2.13Upgrade openvswitch2.13-develUpgrade openvswitch3.1-develUpgrade python3-openvswitch2.15-debuginfoUpgrade openvswitch2.15-debugsourceUpgrade network-scripts-openvswitch2.13Upgrade openvswitch2.17-ipsecUpgrade openvswitch3.1-testUpgrade openvswitch2.15-ipsecUpgrade openvswitch3.1Upgrade openvswitch2.17-develUpgrade openvswitch2.15-testUpgrade python3-openvswitch2.17-debuginfoUpgrade openvswitch2.13Upgrade openvswitch3.1-debuginfoUpgrade openvswitch2.13-debugsourceUpgrade network-scripts-openvswitch2.15Upgrade openvswitch3.1-debugsourceUpgrade openvswitch2.17-debugsourceUpgrade openvswitch2.13-testUpgrade openvswitch2.15-develUpgrade network-scripts-openvswitch2.17Upgrade python3-openvswitch2.17Upgrade network-scripts-openvswitch3.1Upgrade python3-openvswitch2.15Upgrade openvswitch3.1-ipsecUpgrade openvswitch2.17-testUpgrade openvswitch2.15Upgrade python3-openvswitch3.1Upgrade openvswitch2.13-debuginfoUpgrade python3-openvswitch2.13-debuginfoUpgrade openvswitch2.15-debuginfoUpgrade openvswitch2.13-ipsecUpgrade openvswitch2.17-debuginfo | Apr 14, 2023 | Apr 10, 2023 |
| Debian | — | Upgrade openvswitch | Apr 17, 2023 | Apr 10, 2023 |
| Gentoo Linux | — | Upgrade net-misc/openvswitch. | Nov 27, 2023 | Apr 10, 2023 |
| Redhat_linux | — | Upgrade network-scripts-openvswitch2.15No solution existsUpgrade openvswitch2.17-testUpgrade openvswitch2.17-debuginfoUpgrade python3-openvswitch3.1-debuginfoUpgrade python3-openvswitch2.15Upgrade openvswitch2.17-develUpgrade openvswitch2.15-ipsecUpgrade python3-openvswitch2.17Upgrade openvswitch3.1-develUpgrade network-scripts-openvswitch3.1Upgrade openvswitch2.13-debugsourceUpgrade python3-openvswitch2.15-debuginfoUpgrade openvswitch2.13Upgrade network-scripts-openvswitch2.13Upgrade openvswitch3.1-ipsecUpgrade openvswitch2.15-debugsourceUpgrade openvswitch2.13-develUpgrade openvswitch3.1-debugsourceUpgrade openvswitch2.17Upgrade python3-openvswitch2.13Upgrade openvswitch2.17-ipsecUpgrade openvswitch3.1-testUpgrade network-scripts-openvswitch2.17Upgrade python3-openvswitch2.13-debuginfoUpgrade openvswitch2.15-testUpgrade python3-openvswitch2.17-debuginfoUpgrade openvswitch3.1-debuginfoUpgrade python3-openvswitch3.1Upgrade openvswitch2.13-testUpgrade openvswitch3.1Upgrade openvswitch2.13-ipsecUpgrade openvswitch2.15Upgrade openvswitch2.17-debugsourceUpgrade openvswitch2.13-debuginfoUpgrade openvswitch2.15-develUpgrade openvswitch2.15-debuginfo | Apr 14, 2023 | Apr 10, 2023 |
| Suse | — | Upgrade libovn-23_03-0Upgrade libopenvswitch-3_1-0Upgrade libopenvswitch-2_14-0Upgrade ovn3-centralUpgrade openvswitch3Upgrade ovn3-vtepUpgrade openvswitch-ipsecUpgrade ovn-develUpgrade openvswitch3-ipsecUpgrade ovn3-hostUpgrade ovn3Upgrade openvswitch-testUpgrade ovn3-docUpgrade ovn3-dockerUpgrade ovn-hostUpgrade openvswitch3-develUpgrade python3-ovs3Upgrade libovn-20_03-0Upgrade ovn3-develUpgrade python3-ovsUpgrade openvswitch3-vtepUpgrade openvswitch-pkiUpgrade libopenvswitch-2_11-0Upgrade openvswitch-docUpgrade openvswitch-develUpgrade openvswitchUpgrade libovn-20_06-0Upgrade openvswitch3-pkiUpgrade ovn-centralUpgrade ovn-vtepUpgrade openvswitch3-docUpgrade openvswitch-vtepUpgrade ovn-dockerUpgrade ovn-docUpgrade ovnUpgrade openvswitch3-testUpgrade libopenvswitch-2_13-0 | May 24, 2023 | Apr 10, 2023 |
| Ubuntu | — | Upgrade python3-openvswitchUpgrade python-openvswitchUpgrade openvswitch-common | May 11, 2023 | Apr 10, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub