1201 matches found
SUSE SLED15: libdpdk-18_11 / libopenvswitch-2_11-0 / openvswitch-ovn-central / etc (SUSE-SU-2023:1795-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1795-1 advisory. - CVE-2021-36980: Fixed a use-after-free issue during the decoding of a RAWENCAP action...
SUSE-SU-2023:1795-1 Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2021-36980: Fixed a use-after-free issue during the decoding of a RAWENCAP action bsc1188524. - CVE-2022-32166: Fixed a out of bounds read in minimaskequal bsc1203865...
CVE-2023-1668
A flaw was found in openvswitch OVS. When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results for both kernel and userspace datapath in installing a datapath flow matching all IP protocols nwproto is wildcarded...
CBL Mariner 2.0 Security Update: openvswitch (CVE-2019-25076)
The version of openvswitch installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-25076 advisory. - The TSS Tuple Space Search algorithm in Open vSwitch 2.x through 2.17.2 and 3.0.0 allows remote attacke...
Denial Of Service (DoS)
openvswitch is vulnerable to Denial of Service DoS attacks. A memory leak occurs during userspace IP fragmentation processing, which allows an attacker to use this flaw to potentially exhaust available memory by keeping sending packet fragments, causing the application to crash...
Unbreakable Enterprise kernel security update
5.4.17-2136.317.5.3 - udf: Fix file corruption when appending just after end of preallocated extent Jan Kara Orabug: 35192150 - selftests/ftrace: Fix bash specific '==' operator Masami Hiramatsu Google Orabug: 35192150 - net: Fix unwanted sign extension in netdevstatstostats64 Felix Riemann Orabu...
CBL Mariner 2.0 Security Update: openvswitch (CVE-2022-4338)
The version of openvswitch installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-4338 advisory. - An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch...
CBL Mariner 2.0 Security Update: openvswitch (CVE-2022-4337)
The version of openvswitch installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-4337 advisory. - An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch...
GSD-2023-1002374 net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
net: openvswitch: fix possible memory leak in ovsmetercmdset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.169 by commit...
GSD-2023-1002345 net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
net: openvswitch: fix possible memory leak in ovsmetercmdset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.95 by commit...
GSD-2023-1002304 net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
net: openvswitch: fix possible memory leak in ovsmetercmdset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.13 by commit...
PT-2023-35380 · Unknown · Openvswitch
Name of the Vulnerable Software and Affected Versions: openvswitch versions prior to v6.1.13 Description: A potential memory leak issue exists in the ovs meter cmd set function. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to v6.1.13,...
PT-2023-35420 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: openvswitch versions prior to v5.15.95 Linux Kernel versions prior to v5.15.95 Description: A possible memory leak was identified in the ovs meter cmd set function. The actual impact and attack plausibility have not yet been proven...
Ubuntu: Security Advisory (USN-5890-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Open vSwitch vulnerabilities (USN-5890-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5890-1 advisory. Qian Chen discovered that Open vSwitch incorrectly handled certain Organization Specific TLVs. A remote attacker could use this...
NewStart CGSL MAIN 6.02 : kernel Multiple Vulnerabilities (NS-SA-2023-0005)
The remote NewStart CGSL host, running version MAIN 6.02, has kernel packages installed that are affected by multiple vulnerabilities: - A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw...
SUSE CVE-2020-35498
A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this...
SUSE CVE-2021-36980
Open vSwitch aka openvswitch 2.11.0 through 2.15.0 has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...
SUSE CVE-2022-2639
An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reservesfasize function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write...