Red Hat Security Advisory

RHSA-2018:3500

openvswitch security, bug fix, and enhancement update

Released 2018-11-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fast Datapath for Red Hat Enterprise Linux 7 openvswitch-2.9.0-70.el7fdp.1, openvswitch-devel-2.9.0-70.el7fdp.1, openvswitch-ovn-central-2.9.0-70.el7fdp.1 +5
Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts openvswitch-2.9.0-70.el7fdp.1, openvswitch-devel-2.9.0-70.el7fdp.1, openvswitch-ovn-common-2.9.0-70.el7fdp.1 +2

TI-2018-12303 CVE-2018-17205 · GHSA-vxv4-rrx9-5xfq

LOW 38

An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting ofproto_rule_insert__ in ofproto/ofproto.c.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02531 Published 2018-09-19 Partial fix CWE-617

TI-2018-12304 CVE-2018-17206 · GHSA-pcf7-fwpx-5mr2

LOW 26

An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02046 Published 2018-09-19 Partial fix CWE-125

TI-2018-12302 CVE-2018-17204 · GHSA-4wv2-475w-c2fw

LOW 24

An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting parse_group_prop_ntr_selection_method in lib/ofp-util.c.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01911 Published 2018-09-19 Partial fix CWE-617