In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in lib/ofp-util.c
in the function ofputil_pull_ofp15_group_mod
.
access.redhat.com/errata/RHSA-2017:2418
access.redhat.com/errata/RHSA-2017:2553
access.redhat.com/errata/RHSA-2017:2648
access.redhat.com/errata/RHSA-2017:2665
access.redhat.com/errata/RHSA-2017:2692
access.redhat.com/errata/RHSA-2017:2698
access.redhat.com/errata/RHSA-2017:2727
mail.openvswitch.org/pipermail/ovs-dev/2017-May/332965.html