Buffer Over-Read

ovs is vulnerable to buffer over-reads. The library does not check if the message length was in the specified range before reading it in the ofputil_pull_ofp15_group_mod() function in lib/ofp-util.c. This can allow a malicious user to cause a buffer over-read which can cause the application to crash or overwrite parts of the memory.