EUVD-2018-8968

Malware in sbrugna...

The vulnerability of the decode_bundle() function in the Open vSwitch software multi-level switch allows a attacker to cause a service failure.

The vulnerability of the decodebundle function in lib/ofp-actions.c of the Open vSwitch OvS software multi-level switch involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2018-17206

An issue was discovered in Open vSwitch OvS 2.7.x through 2.7.6. The decodebundle function inside lib/ofp-actions.c is affected by a buffer over-read issue during BUNDLE action decoding...