A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0 OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow but with an incorrect action possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.

🗓️ 11 Apr 2023 07:00:00Reported by MicrosoftType

Open vSwitch flaw: processing IP protocol zero creates a wildcard flow with no IP header action.

Reporter	Title	Published	Views	Family All 103
AlpineLinux	CVE-2023-1668	10 Apr 202300:00	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в openvswitch	3 May 202623:59	–	astralinux
CBLMariner	CVE-2023-1668 affecting package openvswitch for versions less than 2.17.5-2	25 May 202309:38	–	cbl_mariner
CBLMariner	CVE-2023-1668 affecting package openvswitch for versions less than 2.17.5-3	19 Mar 202417:21	–	cbl_mariner
Circl	CVE-2023-1668	11 Apr 202302:22	–	circl
CNNVD	Open vSwitch 安全漏洞	6 Apr 202300:00	–	cnnvd
CVE	CVE-2023-1668	10 Apr 202300:00	–	cve
Cvelist	CVE-2023-1668	10 Apr 202300:00	–	cvelist
Debian	[SECURITY] [DLA 3410-1] openvswitch security update	1 May 202300:15	–	debian
Debian	[SECURITY] [DSA 5387-1] openvswitch security update	13 Apr 202318:45	–	debian