Lucene search
+L

792 matches found

Positive Technologies
Positive Technologies
added 2023/02/13 12:0 a.m.6 views

PT-2023-35114 · Unknown · Openvswitch

Name of the Vulnerable Software and Affected Versions: openvswitch versions prior to v5.15.93 Description: A memory leak issue was discovered in the ovs flow cmd new function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.15.86 and is...

7.1AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2023/02/09 12:30 a.m.38 views

Moderate: Red Hat Security Advisory: openvswitch2.15 security, bug fix and enhancement update

An update for openvswitch2.15 is now available for Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

9.8CVSS7.4AI score0.01324EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2023/02/09 12:30 a.m.6 views

openvswitch: Out-of-Bounds Read in Organization Specific TLV

A flaw was found in the OpenvSwitch package. If LLDP processing is enabled for a specific port, crafted LLDP packets could cause a denial of service...

9.8CVSS7.3AI score0.01324EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2023/02/09 12:29 a.m.27 views

Moderate: Red Hat Security Advisory: openvswitch2.16 security, bug fix and enhancement update

An update for openvswitch2.16 is now available for Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

9.8CVSS7.4AI score0.01324EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/02/09 12:29 a.m.5 views

openvswitch: Out-of-Bounds Read in Organization Specific TLV

A flaw was found in the OpenvSwitch package. If LLDP processing is enabled for a specific port, crafted LLDP packets could cause a denial of service...

9.8CVSS7.3AI score0.01324EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2023/02/09 12:29 a.m.13 views

openvswitch: Out-of-Bounds Read in Organization Specific TLV

A flaw was found in the OpenvSwitch package. If LLDP processing is enabled for a specific port, crafted LLDP packets could cause a denial of service...

9.8CVSS7.3AI score0.01324EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2023/02/09 12:29 a.m.32 views

Moderate: Red Hat Security Advisory: openvswitch2.17 security, bug fix and enhancement update

An update for openvswitch2.17 is now available for Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

9.8CVSS7.4AI score0.01324EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/02/09 12:27 a.m.5 views

openvswitch: Integer Underflow in Organization Specific TLV

A flaw was found in the OpenvSwitch package. If LLDP processing is enabled for a specific port, crafted LLDP packets could cause a data underflow...

9.8CVSS7.3AI score0.01324EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2023/02/09 12:27 a.m.37 views

Moderate: Red Hat Security Advisory: openvswitch2.17 security, bug fix and enhancement update

An update for openvswitch2.17 is now available for Fast Datapath for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

9.8CVSS7.4AI score0.01324EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2023/02/09 12:27 a.m.6 views

openvswitch: Out-of-Bounds Read in Organization Specific TLV

A flaw was found in the OpenvSwitch package. If LLDP processing is enabled for a specific port, crafted LLDP packets could cause a denial of service...

9.8CVSS7.3AI score0.01324EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2023/01/23 12:0 a.m.15 views

The vulnerability of the Open vSwitch multi-level switch lies in the loss of significance of a whole number, allowing an attacker to execute any code in the target system.

The vulnerability of the Open vSwitch multi-level switch lies in the loss of significance of a whole number during the Auto Attach TLV process. Exploiting this vulnerability allows an attacker to send specially crafted LLDP messages to the vulnerable system, causing a full number of significant...

10CVSS8.2AI score0.01324EPSS
SaveExploits0References10Affected Software8
BDU FSTEC
BDU FSTEC
added 2023/01/23 12:0 a.m.7 views

The vulnerability of the Open vSwitch multi-level switch software, related to the loss of the significance of a whole number, allows an attacker to execute arbitrary code in the target system.

The vulnerability of the Open vSwitch multi-level switch lies in the loss of significance of a whole number during the analysis of Auto Attach TLV. Exploiting this vulnerability allows an attacker to send specially crafted LLDP messages to the vulnerable system, causing a full number of significa...

10CVSS8.2AI score0.01324EPSS
SaveExploits0References10Affected Software8
OSV
OSV
added 2023/01/20 11:4 a.m.3 views

OESA-2023-1043 openvswitch security update

Open vSwitch is a production quality, multilayer virtual switch licensed under the open source Apache 2.0 license. Security Fixes: An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.CVE-2022-4338...

9.8CVSS6.9AI score0.01324EPSS
SaveExploits0References2
OSV
OSV
added 2023/01/20 11:4 a.m.4 views

OESA-2023-1042 openvswitch security update

Open vSwitch is a production quality, multilayer virtual switch licensed under the open source Apache 2.0 license. Security Fixes: An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.CVE-2022-4338...

9.8CVSS6.9AI score0.01324EPSS
SaveExploits0References2
Redos
Redos
added 2023/01/17 12:0 a.m.35 views

ROS-20230117-02

A vulnerability in the Open vSwitch software tiered switch is related to loss of integer significance when parsing Auto Attach TLVs. integer when parsing Auto Attach TLVs. Exploitation of the vulnerability could allow an attacker acting remotely to send specially crafted LLDP messages. remotely,...

9.8CVSS9.3AI score0.01324EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2023/01/15 12:0 a.m.26 views

Debian: Security Advisory (DSA-5319-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.01324EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
added 2023/01/14 8:0 a.m.4 views

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.

...

9.8CVSS9.4AI score0.01324EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2023/01/10 10:15 p.m.6 views

CVE-2022-4338

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch...

9.8CVSS5.2AI score0.01324EPSS
SaveExploits0References6
OSV
OSV
added 2023/01/10 10:15 p.m.1 views

DEBIAN-CVE-2022-4338

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch...

9.8CVSS9.3AI score0.01324EPSS
SaveExploits0References1
OSV
OSV
added 2023/01/10 10:15 p.m.6 views

AZL-12953 CVE-2022-4338 affecting package openvswitch for versions less than 2.17.5-1

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch...

9.8CVSS7.3AI score0.01324EPSS
SaveExploits0References1
Rows per page
Query Builder