CVE-2023-1668

CVE-2023-1668 — Open vSwitch (OVS) has a flaw where, when processing an IP packet with protocol 0, OVS installs a datapath flow whose action does not modify the IP header. This can cause a datapath rule matching all IP protocols (nw_proto wildcarded) to have an incorrect action, risking improper ...

CVE-2022-32166

Versions v0.90.0 through v2.5.0 of Open vSwitch (OVS) are vulnerable to a heap buffer over-read in flow.c. The root cause is an unsafe comparison within the minimasks function (specifically minimask_equal()), which can lead to accessing unmapped memory regions. This vulnerability may result in so...