Red Hat Security Advisory

RHSA-2017:2665

openvswitch security update

Released 2017-09-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7 openvswitch-2.4.1-2.git20160727.el7ost, python-openvswitch-2.4.1-2.git20160727.el7ost

Fixes 3 records

TI-2017-06707 CVE-2017-9265 · GHSA-34xg-fgjc-449p

In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod…

MEDIUM 47

In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` in the function `ofputil_pull_ofp15_group_mod`.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02809 Published 2017-05-29 Partial fix CWE-125

TI-2017-06664 CVE-2017-9214 · GHSA-6q3f-fc2p-9rh3

In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0…

MEDIUM 47

In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_r…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02887 Published 2017-05-23 Partial fix CWE-191

TI-2017-06705 CVE-2017-9263 · GHSA-3r4j-wr9x-6p4f

In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a…

LOW 31

In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` t…

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01008 Published 2017-05-29 Partial fix CWE-20