CVE-2022-4337

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch...

Design/Logic Flaw

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch...

kernel: openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size()

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reservesfasize function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kernel: openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size()

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reservesfasize function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write...

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

CVE-2022-4338: Out-of-bounds Read

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch...

CVE-2022-4337

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch...

CVE-2022-4337

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch...

CVE-2022-4337

CVE-2022-4337 describes an out-of-bounds read in Open vSwitch’s Organization Specific TLV across various Open vSwitch versions. The related documents identify Open vSwitch as the affected product with the root cause being an out-of-bounds read in TLV handling, leading to high-severity impact (con...

CVE-2022-4337: Out-of-bounds Read

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch...

CVE-2022-4337

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch...

CVE-2022-4338

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch...

CVE-2022-4338

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch...

CVE-2022-4338

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch...

CVE-2022-4338

CVE-2022-4338 is an integer underflow in Open vSwitch (Organization Specific TLV) affecting various Open vSwitch versions. Connected sources confirm the issue and link multiple vendor advisories. Impact is high per CVSS, with network attack vector and high confidentiality/integrity/availability i...

CVE-2022-4338

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch...

CVE-2022-4337

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch...

CVE-2022-4337

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch...

CVE-2022-4338

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch...