Описание
Security update for openvswitch
This update for openvswitch fixes the following issues:
- CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580).
- CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581).
- CVE-2022-32166: Fixed out of bounds read in minimask_equal() (bsc#1203865).
Список пакетов
SUSE Linux Enterprise Server 12 SP2-BCL
openvswitch-2.5.11-25.34.1
openvswitch-dpdk-2.5.11-25.34.1
openvswitch-dpdk-switch-2.5.11-25.34.1
openvswitch-switch-2.5.11-25.34.1
Ссылки
- Link for SUSE-SU-2023:2259-1
- E-Mail link for SUSE-SU-2023:2259-1
- SUSE Security Ratings
- SUSE Bug 1203865
- SUSE Bug 1206580
- SUSE Bug 1206581
- SUSE CVE CVE-2022-32166 page
- SUSE CVE CVE-2022-4337 page
- SUSE CVE CVE-2022-4338 page
Описание
In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of "minimasks" function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP2-BCL:openvswitch-2.5.11-25.34.1
SUSE Linux Enterprise Server 12 SP2-BCL:openvswitch-dpdk-2.5.11-25.34.1
SUSE Linux Enterprise Server 12 SP2-BCL:openvswitch-dpdk-switch-2.5.11-25.34.1
SUSE Linux Enterprise Server 12 SP2-BCL:openvswitch-switch-2.5.11-25.34.1
Ссылки
- CVE-2022-32166
- SUSE Bug 1203865
Описание
An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP2-BCL:openvswitch-2.5.11-25.34.1
SUSE Linux Enterprise Server 12 SP2-BCL:openvswitch-dpdk-2.5.11-25.34.1
SUSE Linux Enterprise Server 12 SP2-BCL:openvswitch-dpdk-switch-2.5.11-25.34.1
SUSE Linux Enterprise Server 12 SP2-BCL:openvswitch-switch-2.5.11-25.34.1
Ссылки
- CVE-2022-4337
- SUSE Bug 1206581
Описание
An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP2-BCL:openvswitch-2.5.11-25.34.1
SUSE Linux Enterprise Server 12 SP2-BCL:openvswitch-dpdk-2.5.11-25.34.1
SUSE Linux Enterprise Server 12 SP2-BCL:openvswitch-dpdk-switch-2.5.11-25.34.1
SUSE Linux Enterprise Server 12 SP2-BCL:openvswitch-switch-2.5.11-25.34.1
Ссылки
- CVE-2022-4338
- SUSE Bug 1206580