Buffer Over-Read

ovs is vulnerable to buffer over-reads. The library does not check if the message length was in the specified range before reading it in the ofputilpullofp15groupmod function in lib/ofp-util.c. This can allow a malicious user to cause a buffer over-read which can cause the application to crash or...

Denial Of Service (DoS)

ovs is vulnerable to denial of service DoS attacks. The library has a default case in the ofpprintrolestatusmessage function in lib/ofp-print.c that calls the abort function. This can allow a malicious user to cause the application to abort by passing an unknown role status message...

Integer Underflow

ovs is vulnerable to integer underflows. The library does not properly check memory size in the ofputilpullqueuegetconfigreply10 function in lib\ofp-util.c, causing an integer underflow that can crash the application or overwrite memory...

openSUSE Security Update : openvswitch (openSUSE-2017-973)

This update for openvswitch fixes the following issues : - CVE-2017-9263: OpenFlow role status message can cause a call to abort leading to application crash bsc1041470 - CVE-2017-9265: Buffer over-read while parsing message could lead to crash or maybe arbitrary code execution bsc1041447 - Do no...

CVE-2017-9265

In Open vSwitch OvS v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in lib/ofp-util.c in the function ofputilpullofp15groupmod...

CVE-2017-9263

In Open vSwitch OvS 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort function for undefined role status reasons in the function ofpprintrolestatusmessage in lib/ofp-print.c that may be leveraged toward a remote DoS attack by a malicious switch...

CVE-2016-10377

Open vSwitch (OvS) 2.5.0 is affected by CVE-2016-10377. The vulnerability lies in the lib/flow.c function miniflow_extract, where an unsigned integer underflow when processing a malformed IP packet can cause the switch to read past the end of the packet buffer. This permits remote bypass of the s...

CVE-2017-9264

CVE-2017-9264 affects Open vSwitch (OvS) firewall code. The vulnerability lies in the packet parsing path in lib/conntrack.c, specifically the functions extract_l3_ipv6, extract_l4_tcp, and extract_l4_udp, where a crafted TCP/UDP/IPv6 packet can trigger a buffer over-read. Demonstrated impact inc...

CVE-2017-9263

CVE-2017-9263 affects Open vSwitch 2.7.0 where parsing an OpenFlow role status message can trigger abort() on undefined role status reasons in lib/ofp-print.c, enabling a remote DoS via a malicious switch. This is the core issue described across security notices (RHSA advisories and OSV entries) ...

CVE-2017-9265

CVE-2017-9265 : Open vSwitch (OvS) 2.7.0 contains a buffer over-read while parsing the GroupMod OpenFlow message from the controller (function ofputil_pull_ofp15_group_mod in lib/ofp-util.c). Exploitation could cause a denial-of-service condition. Public sources in the connected documents describ...

CVE-2017-9265

In Open vSwitch OvS v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in lib/ofp-util.c in the function ofputilpullofp15groupmod...

CVE-2017-9214

Summary: CVE-2017-9214 affects Open vSwitch (OvS) 2.7.0 and is due to a buffer over-read caused by an unsigned integer underflow in the function ofputil_pull_queue_get_config_reply10 while parsing OFPT_QUEUE_GET_CONFIG_REPLY (OFP 1.0). Impact (as described): Buffer over-read with potential denial...

Ovs-vswitchd daemon showing high CPU usage

XenServer 6.5 SP1 heavy IO traffic/ CPU utilization with open vswitch technology. Ovs-vswitchd daemon running on the XS was showing high CPU usage and performance tab shows heavy CPU usage...

CVE-2016-2074

Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted MPLS packets, as demonstrated by a long string in an ovs-appctl command...

Buffer overflow

Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted MPLS packets, as demonstrated by a long string in an ovs-appctl command...

CVE-2016-2074

Open vSwitch: MPLS processing in ovs-vswitchd contains a buffer overflow in OpenFlow/MPLS label handling affecting Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1. A remote attacker can exploit crafted MPLS packets to achieve arbitrary code execution or DoS. Upstream fixes are in...

CVE-2016-2074

Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted MPLS packets, as demonstrated by a long string in an ovs-appctl command...

CVE-2016-2074

Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted MPLS packets, as demonstrated by a long string in an ovs-appctl command...

How to Remove ovs-vswitchd Manager Permanently from XenServer Config

This article describes how to remove ovs-vswitchd manager permanently from XenServer config. Citrix Distributed Virtual Switch/Controller DVSC that connects to the open-vswitchd running on the XenServer DOM0 machines. DVSC is proved to cause some trouble with the Virtual Machines VMs. In...

Important: Red Hat Security Advisory: openvswitch security update

Updated openvswitch packages that fix one security issue are now available for Red Hat OpenShift Enterprise 3.1. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...