Read the docs
TI-2023-01565 Aliases CVE-2023-1668GHSA-w6wj-g5cv-fh4w

A flaw was found in openvswitch (OVS).

Priority MEDIUM 44CWE-670Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · None · High
Fix status
Partial Red Hat: 3 fixed, 7 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.

Summary

A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01216 68th percentileScored 2026-11-07
Fix Partial Red Hat: 7 advisoriesRed Hat: 3 fixed, 7 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—openvswitchunknown—No fix listedCNA
  • openvswitch Vendor— Affected unknown Fixed in — No fix listed CNA

CPE configurations NVD · 11

CPEVersionsRoleVendor
cpe:2.3:a:cloudbase:open_vswitch:*:*:*:*:*:*:*:*1.5.0 to before 2.13.11; 2.14.0 to before 2.14.9; 2.15.0 to before 2.15.8; 2.16.0 to before 2.16.7; 2.17.0 to before 2.17.6; 3.0.0 to before 3.0.4VulnerableCloudbase
cpe:2.3:a:cloudbase:open_vswitch:3.1.0:*:*:*:*:*:*:*3.1.0VulnerableCloudbase
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*11.0VulnerableDebian
cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*4.0VulnerableRed Hat
cpe:2.3:a:redhat:openstack_platform:16.1:*:*:*:*:*:*:*16.1VulnerableRed Hat
cpe:2.3:a:redhat:openstack_platform:16.2:*:*:*:*:*:*:*16.2VulnerableRed Hat
cpe:2.3:a:redhat:openstack_platform:17.0:*:*:*:*:*:*:*17.0VulnerableRed Hat
cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*4.0VulnerableRed Hat
cpe:2.3:a:redhat:fast_datapath:-:*:*:*:*:*:*:*not specified by NVDVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*7.0Running onRed Hat
  • cpe:2.3:a:cloudbase:open_vswitch:*:*:*:*:*:*:*:* Versions 1.5.0 to before 2.13.11; 2.14.0 to before 2.14.9; 2.15.0 to before 2.15.8; 2.16.0 to before 2.16.7; 2.17.0 to before 2.17.6; 3.0.0 to before 3.0.4 Vulnerable ·Cloudbase
  • cpe:2.3:a:cloudbase:open_vswitch:3.1.0:*:*:*:*:*:*:* Versions 3.1.0 Vulnerable ·Cloudbase
  • cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Debian
  • cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openstack_platform:16.1:*:*:*:*:*:*:* Versions 16.1 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openstack_platform:16.2:*:*:*:*:*:*:* Versions 16.2 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openstack_platform:17.0:*:*:*:*:*:*:* Versions 17.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:fast_datapath:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Running on ·Red Hat
Show 1 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:-:*:*:*8.0Running onRed Hat
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:-:*:*:* Versions 8.0 Running on ·Red Hat

Remediation

Red Hat 7 advisories

  • RHSA-2023:3491 Released 2023-06-06 · Red Hat rating Important
    Red Hat Virtualization Host 4.4.z SP 1 security update
    • Red Hat Virtualization 4 Hypervisor for RHEL 8 redhat-virtualization-host-4.5.3-202306050942_8.6, redhat-virtualization-host-image-update-4.5.3-202306050942_8.6
  • RHSA-2023:1824 Released 2023-04-18 · Red Hat rating Moderate
    openvswitch2.15 security update
    • Fast Datapath for Red Hat Enterprise Linux 8 network-scripts-openvswitch2.15-2.15.0-136.el8fdp, openvswitch2.15-2.15.0-136.el8fdp, openvswitch2.15-devel-2.15.0-136.el8fdp +3
  • RHSA-2023:1823 Released 2023-04-18 · Red Hat rating Moderate
    openvswitch2.13 security update
    • Fast Datapath for Red Hat Enterprise Linux 8 network-scripts-openvswitch2.13-2.13.0-214.el8fdp, openvswitch2.13-2.13.0-214.el8fdp, openvswitch2.13-devel-2.13.0-214.el8fdp +3
Show 4 more Red Hat advisories
  • RHSA-2023:1770 Released 2023-04-13 · Red Hat rating Moderate
    openvswitch3.1 security update
    • Fast Datapath for Red Hat Enterprise Linux 9 openvswitch3.1-3.1.0-14.el9fdp, openvswitch3.1-devel-3.1.0-14.el9fdp, openvswitch3.1-ipsec-3.1.0-14.el9fdp +2
  • RHSA-2023:1769 Released 2023-04-13 · Red Hat rating Moderate
    openvswitch2.17 security update
    • Fast Datapath for Red Hat Enterprise Linux 9 openvswitch2.17-2.17.0-77.el9fdp, openvswitch2.17-devel-2.17.0-77.el9fdp, openvswitch2.17-ipsec-2.17.0-77.el9fdp +2
  • RHSA-2023:1765 Released 2023-04-13 · Red Hat rating Moderate
    openvswitch2.17 security update
    • Fast Datapath for Red Hat Enterprise Linux 8 network-scripts-openvswitch2.17-2.17.0-88.el8fdp, openvswitch2.17-2.17.0-88.el8fdp, openvswitch2.17-devel-2.17.0-88.el8fdp +3
  • RHSA-2023:1766 Released 2023-04-13 · Red Hat rating Moderate
    openvswitch3.1 security update
    • Fast Datapath for Red Hat Enterprise Linux 8 network-scripts-openvswitch3.1-3.1.0-17.el8fdp, openvswitch3.1-3.1.0-17.el8fdp, openvswitch3.1-devel-3.1.0-17.el8fdp +3

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Fast Datapath for RHEL 7AffectedNo fix planned: Out of support scope
Fast Datapath for RHEL 8AffectedNo fix planned: Out of support scope
Fast Datapath for RHEL 9AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 7AffectedNo fix planned: Out of support scope
Red Hat OpenShift Container Platform 3.11AffectedNo fix planned: Out of support scope
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenStack Platform 13 (Queens)AffectedNo fix planned: Out of support scope
Fast Datapath for Red Hat Enterprise Linux 8Fixed RHSA-2023:1765, RHSA-2023:1766, RHSA-2023:1823, RHSA-2023:1824
Fast Datapath for Red Hat Enterprise Linux 9Fixed RHSA-2023:1769, RHSA-2023:1770
Red Hat Virtualization 4 Hypervisor for RHEL 8Fixed RHSA-2023:3491
Not affected: 3 products
  • RHEL 8-based RHEV-H for RHEV 4 (build requirements)
  • Red Hat OpenShift Container Platform 4
  • Red Hat Virtualization 4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-1668
  2. 2026-10-03 Alias added: GHSA-w6wj-g5cv-fh4w

References

Patch 1

Advisory 4

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences