Lucene search

K
nvd[email protected]NVD:CVE-2022-32166
HistorySep 28, 2022 - 10:15 a.m.

CVE-2022-32166

2022-09-2810:15:09
CWE-125
web.nvd.nist.gov

0.001 Low

EPSS

Percentile

40.8%

In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

Affected configurations

NVD
Node
cloudbaseopen_vswitchRange0.90.02.5.0
Node
debiandebian_linuxMatch10.0

0.001 Low

EPSS

Percentile

40.8%