Browse CVEs

HIGH 7.5 CVE-2024-22563 openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in openvswitch-2.17.8/lib/util.c. Openvswitch No fix yet Fix from $1,9502024-01-19 MEDIUM 5.8 CVE-2019-25076 The TSS (Tuple Space Search) algorithm in Open vSwitch 2.x through 2.17.2 and 3.0.0 allows remote attackers to cause a denial of service (delays of l… Openvswitch after 2.17.2 Fix from $1,6002022-09-08 MEDIUM 5.5 CVE-2021-36980 Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) du… Openvswitch after 2.15.0 Fix from $1,6002021-07-20 MEDIUM 5.9 CVE-2017-14970 In lib/ofp-util.c in Open vSwitch (OvS) before 2.8.1, there are multiple memory leaks while parsing malformed OpenFlow group mod messages. NOTE: the … Openvswitch after 2.8.0 Fix from $1,6002017-10-02 CRITICAL 9.8 CVE-2017-9264 In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6… Openvswitch Patch available Fix from $2,3002017-05-29 CRITICAL 9.8 CVE-2017-9265 In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` i… Openvswitch Patch available Fix from $2,3002017-05-29 HIGH 8.8 CVE-2016-10377 In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflo… Openvswitch Patch available Fix from $1,9502017-05-29 MEDIUM 6.5 CVE-2017-9263 In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons… Openvswitch Patch available Fix from $1,6002017-05-29