Red Hat Security Advisory

RHSA-2019:0053

openvswitch security and bug fix update

Released 2019-01-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

OpenStack 10.0 Tools for RHEL 7 openvswitch-test-2.9.0-83.el7fdp.1
Red Hat OpenStack Platform 10.0 openvswitch-2.9.0-83.el7fdp.1, openvswitch-devel-2.9.0-83.el7fdp.1, openvswitch-ovn-central-2.9.0-83.el7fdp.1 +4

TI-2018-12303 CVE-2018-17205 · GHSA-vxv4-rrx9-5xfq

LOW 38

An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting ofproto_rule_insert__ in ofproto/ofproto.c.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02531 Published 2018-09-19 Partial fix CWE-617

TI-2018-12304 CVE-2018-17206 · GHSA-pcf7-fwpx-5mr2

LOW 26

An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02046 Published 2018-09-19 Partial fix CWE-125

TI-2018-12302 CVE-2018-17204 · GHSA-4wv2-475w-c2fw

LOW 24

An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting parse_group_prop_ntr_selection_method in lib/ofp-util.c.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01911 Published 2018-09-19 Partial fix CWE-617