openvswitch: Integer underflow in the ofputil_pull_queue_get_config_reply10 function

An unsigned integer wrap around that led to a buffer over-read was found when parsing OFPTQUEUEGETCONFIGREPLY messages in Open vSwitch OvS. An attacker could use this issue to cause a remote denial of service attack...

PT-2017-18816

Name of the Vulnerable Software and Affected Versions Open vSwitch OvS version 2.7.0 Description The issue arises from a buffer over-read that occurs while parsing the group mod OpenFlow message sent from the controller. This happens in the lib/ofp-util.c file, specifically within the ofputil pul...