CVE-2022-4337

Опубликовано: 10 янв. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

Ссылки

https://github.com/openvswitch/ovs/pull/405
Patch
Third Party Advisory
https://mail.openvswitch.org/pipermail/ovs-dev/2022-December/400596.html
Mailing List
Patch
Vendor Advisory
https://security.gentoo.org/glsa/202311-16
https://www.debian.org/security/2023/dsa-5319
Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/12/21/4
Mailing List
Third Party Advisory
https://github.com/openvswitch/ovs/pull/405
Patch
Third Party Advisory
https://mail.openvswitch.org/pipermail/ovs-dev/2022-December/400596.html
Mailing List
Patch
Vendor Advisory
https://security.gentoo.org/glsa/202311-16
https://www.debian.org/security/2023/dsa-5319
Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/12/21/4
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*

Версия до 2.13.10 (исключая)

cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*

Версия от 2.14.0 (включая) до 2.14.8 (исключая)

cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*

Версия от 2.15.0 (включая) до 2.15.7 (исключая)

cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*

Версия от 2.16.0 (включая) до 2.16.6 (исключая)

cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*

Версия от 2.17.0 (включая) до 2.17.5 (исключая)

cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*

Версия от 3.0.0 (включая) до 3.0.3 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

EPSS

Процентиль: 58%

0.00369

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVE-2022-4337

CVSS3: 9.8

ubuntu

почти 3 года назад

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

CVE-2022-4337

CVSS3: 9.8

redhat

почти 3 года назад

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

CVE-2022-4337

CVSS3: 9.8

msrc

почти 3 года назад

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

CVE-2022-4337

CVSS3: 9.8

debian

почти 3 года назад

An out-of-bounds read in Organization Specific TLV was found in variou ...

GHSA-3ch9-x7v9-qhxv

CVSS3: 9.8

github

почти 3 года назад

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

EPSS

Процентиль: 58%

0.00369

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-125