Read the docs
TI-2022-03971 Aliases CVE-2022-4337GHSA-3ch9-x7v9-qhxv

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

Priority MEDIUM 45CWE-125Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 2 fixed, 4 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.

Summary

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

Why it matters now

EPSS 0.01385 72nd percentileScored 2026-11-07
Fix Partial Red Hat: 5 advisoriesRed Hat: 2 fixed, 4 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—openvswitchopenvswitch 3.0.3, openvswitch 2.17.5, openvswitch 2.16.6, openvswitch 2.15.7, openvswitch 2.14.8, openvswitch 2.13.10—No fix listedCNA
  • openvswitch Vendor— Affected openvswitch 3.0.3, openvswitch 2.17.5, openvswitch 2.16.6, openvswitch 2.15.7, openvswitch 2.14.8, openvswitch 2.13.10 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*before 2.13.10; 2.14.0 to before 2.14.8; 2.15.0 to before 2.15.7; 2.16.0 to before 2.16.6; 2.17.0 to before 2.17.5; 3.0.0 to before 3.0.3VulnerableOpenvswitch
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*11.0VulnerableDebian
  • cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:* Versions before 2.13.10; 2.14.0 to before 2.14.8; 2.15.0 to before 2.15.7; 2.16.0 to before 2.16.6; 2.17.0 to before 2.17.5; 3.0.0 to before 3.0.3 Vulnerable ·Openvswitch
  • cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Debian

Remediation

Red Hat 5 advisories

  • RHSA-2023:0687 Released 2023-02-09 · Red Hat rating Moderate
    openvswitch2.15 security, bug fix and enhancement update
    • Fast Datapath for Red Hat Enterprise Linux 8 network-scripts-openvswitch2.15-2.15.0-133.el8fdp, openvswitch2.15-2.15.0-133.el8fdp, openvswitch2.15-devel-2.15.0-133.el8fdp +3
  • RHSA-2023:0689 Released 2023-02-09 · Red Hat rating Moderate
    openvswitch2.16 security, bug fix and enhancement update
    • Fast Datapath for Red Hat Enterprise Linux 8 network-scripts-openvswitch2.16-2.16.0-111.el8fdp, openvswitch2.16-2.16.0-111.el8fdp, openvswitch2.16-devel-2.16.0-111.el8fdp +3
  • RHSA-2023:0685 Released 2023-02-09 · Red Hat rating Moderate
    openvswitch2.13 security, bug fix and enhancement update
    • Fast Datapath for Red Hat Enterprise Linux 8 network-scripts-openvswitch2.13-2.13.0-212.el8fdp, openvswitch2.13-2.13.0-212.el8fdp, openvswitch2.13-devel-2.13.0-212.el8fdp +3
Show 2 more Red Hat advisories
  • RHSA-2023:0688 Released 2023-02-09 · Red Hat rating Moderate
    openvswitch2.17 security, bug fix and enhancement update
    • Fast Datapath for Red Hat Enterprise Linux 8 network-scripts-openvswitch2.17-2.17.0-71.el8fdp, openvswitch2.17-2.17.0-71.el8fdp, openvswitch2.17-devel-2.17.0-71.el8fdp +3
  • RHSA-2023:0691 Released 2023-02-09 · Red Hat rating Moderate
    openvswitch2.17 security, bug fix and enhancement update
    • Fast Datapath for Red Hat Enterprise Linux 9 openvswitch2.17-2.17.0-62.el9fdp, openvswitch2.17-devel-2.17.0-62.el9fdp, openvswitch2.17-ipsec-2.17.0-62.el9fdp +2

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    openvswitch — DSA-5319

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2022-03972 An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.Priority MEDIUM 45
    Show all 2 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Fast Datapath for RHEL 7AffectedNo fix yet
Fast Datapath for RHEL 8AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 7AffectedNo fix planned: Out of support scope
Red Hat OpenStack Platform 13 (Queens)AffectedNo fix planned: Out of support scope
Fast Datapath for Red Hat Enterprise Linux 8Fixed RHSA-2023:0685, RHSA-2023:0687, RHSA-2023:0688, RHSA-2023:0689
Fast Datapath for Red Hat Enterprise Linux 9Fixed RHSA-2023:0691
Not affected: 1 product
  • Red Hat OpenShift Container Platform 4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-4337
  2. 2026-10-03 Alias added: GHSA-3ch9-x7v9-qhxv

References

Patch 2

Advisory 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences