ALT-PU-2017-1874

Критический

ALT-PU-2017-1874: package openvswitch update to version 2.7.1-alt1

Источник

errata.altlinux.org

Дата публикации

14.07.2017

Дата обновления

14.07.2017

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades openvswitch to version 2.7.1-alt1.

Устраненные уязвимости3

CVE-2017-9214

Критический 9.8

Дата публикации: 23.05.2017

CWE-191

In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function ofputil_pull_queue_get_config_reply10 in lib/ofp-util.c.

CVSS 3.1

Критический 9.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS 2.0

Высокий 7.5

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Ссылки

CVE-2017-9214 https://nvd.nist.gov/vuln/detail/CVE-2017-9214

Ссылки1

ALT-PU-2017-1874 https://errata.altlinux.org/ALT-PU-2017-1874

Связанные уязвимости

SUSE-SU-2018:0311-1

suse-cvrf

почти 9 лет назад

Security update for openvswitch

openSUSE-SU-2017:2272-1

suse-cvrf

около 9 лет назад

Security update for openvswitch

SUSE-SU-2017:2212-1

suse-cvrf

около 9 лет назад

Security update for openvswitch

CVE-2017-9214

CVSS3: 9.8

ubuntu

больше 9 лет назад

In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.

CVE-2017-9214

CVSS3: 7.5

redhat

больше 9 лет назад

In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.