vulnerability
Debian: CVE-2022-32166: openvswitch -- security update
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:L/AC:L/Au:S/C:P/I:N/A:C) | Sep 28, 2022 | Oct 31, 2022 | Mar 30, 2026 |
Severity
5
CVSS
(AV:L/AC:L/Au:S/C:P/I:N/A:C)
Published
Sep 28, 2022
Added
Oct 31, 2022
Modified
Mar 30, 2026
Description
In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.
Solution
debian-upgrade-openvswitch
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.