Описание
In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in lib/flow.c in the function miniflow_extract, permitting remote bypass of the access control list enforced by the switch.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 7 | openvswitch | Not affected | ||
| Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse) | openvswitch | Not affected | ||
| Red Hat Enterprise Linux OpenStack Platform 6 (Juno) | openvswitch | Not affected | ||
| Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) | openvswitch | Not affected | ||
| Red Hat OpenShift Enterprise 3 | openvswitch | Not affected | ||
| Red Hat OpenStack Platform 10 (Newton) | openvswitch | Not affected | ||
| Red Hat OpenStack Platform 12 (Pike) | openvswitch | Not affected | ||
| Red Hat OpenStack Platform 8 (Liberty) | openvswitch | Not affected | ||
| Red Hat OpenStack Platform 9 (Mitaka) | openvswitch | Not affected | ||
| Red Hat Virtualization 4 | openvswitch | Under investigation |
Показывать по
Дополнительная информация
Статус:
5.6 Medium
CVSS3
Связанные уязвимости
In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in `lib/flow.c` in the function `miniflow_extract`, permitting remote bypass of the access control list enforced by the switch.
In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in `lib/flow.c` in the function `miniflow_extract`, permitting remote bypass of the access control list enforced by the switch.
In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switc ...
In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in `lib/flow.c` in the function `miniflow_extract`, permitting remote bypass of the access control list enforced by the switch.
5.6 Medium
CVSS3