CVE-2017-9264

CVE-2017-9264 affects Open vSwitch (OvS) firewall code. The vulnerability lies in the packet parsing path in lib/conntrack.c, specifically the functions extract_l3_ipv6, extract_l4_tcp, and extract_l4_udp, where a crafted TCP/UDP/IPv6 packet can trigger a buffer over-read. Demonstrated impact inc...