In lib/ofp-util.c in Open vSwitch (OvS) before 2.8.1, there are multiple memory leaks…
Priority LOW 29CWE-772Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-772.
Summary
In lib/ofp-util.c in Open vSwitch (OvS) before 2.8.1, there are multiple memory leaks while parsing malformed OpenFlow group mod messages. NOTE: the vendor disputes the relevance of this report, stating "it can only be triggered by an OpenFlow controller, but OpenFlow controllers have much more direct and powerful ways to force Open vSwitch to allocate memory, such as by inserting flows into the flow table."
Why it matters now
EPSS 0.01244 69th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:* | up to 2.8.0 | Vulnerable | Openvswitch |
- cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:* Versions up to 2.8.0 Vulnerable ·Openvswitch
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Red Hat
Not affected: 10 products
- Fast Datapath for RHEL 7
- Red Hat Enterprise Linux OpenStack Platform 6 (Juno)
- Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)
- Red Hat OpenShift Enterprise 3
- Red Hat OpenStack Platform 10 (Newton)
- Red Hat OpenStack Platform 11 (Ocata)
- Red Hat OpenStack Platform 12 (Pike)
- Red Hat OpenStack Platform 8 (Liberty)
- Red Hat OpenStack Platform 9 (Mitaka)
- Red Hat Virtualization 4
Timeline
- 2026-10-02 Threatist record created from CVE-2017-14970
- 2026-10-03 Alias added: GHSA-jjh9-mpf5-64ww
References
More Openvswitch vulnerabilities
- TI-2024-15067 openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in openvswitch-2.17.8/lib/util.c. CVSS 3.1HIGH 7.5
- TI-2016-01905 Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before… CVSS 3.0CRITICAL 9.8
- TI-2020-18020 Uncontrolled resource consumption in openvswitch CVSS 3.1HIGH 7.5
- TI-2017-06707 In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod… CVSS 3.0CRITICAL 9.8
- TI-2017-06706 In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a… CVSS 3.0CRITICAL 9.8
- TI-2017-06664 In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2017-14970 · CVE Program
- CVE-2017-14970 · NVD
- FIRST EPSS
- GHSA-jjh9-mpf5-64ww · GitHub Advisory Database · CC BY 4.0
- CVE-2017-14970 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences