CVE-2022-32166

Versions v0.90.0 through v2.5.0 of Open vSwitch (OVS) are vulnerable to a heap buffer over-read in flow.c. The root cause is an unsafe comparison within the minimasks function (specifically minimask_equal()), which can lead to accessing unmapped memory regions. This vulnerability may result in so...