Vulnerability-Lookup

CVE-2017-9263 (GCVE-0-2017-9263)

Vulnerability from cvelistv5 – Published: 2017-05-29 03:52 – Updated: 2024-08-05 17:02

Summary

In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch.

Severity

6.5 (Medium)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2265 records in the last 180 days details

References

8 references

URL	Tags
https://access.redhat.com/errata/RHSA-2017:2698	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:2727	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:2692	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:2553	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:2418	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:2648	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:2665	vendor-advisoryx_refsource_REDHAT
https://mail.openvswitch.org/pipermail/ovs-dev/20…	x_refsource_CONFIRM

Date Public

2017-05-28 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T17:02:44.177Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2698",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2698"
          },
          {
            "name": "RHSA-2017:2727",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2727"
          },
          {
            "name": "RHSA-2017:2692",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2692"
          },
          {
            "name": "RHSA-2017:2553",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2553"
          },
          {
            "name": "RHSA-2017:2418",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2418"
          },
          {
            "name": "RHSA-2017:2648",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2648"
          },
          {
            "name": "RHSA-2017:2665",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2665"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-05-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2017:2698",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2698"
        },
        {
          "name": "RHSA-2017:2727",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2727"
        },
        {
          "name": "RHSA-2017:2692",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2692"
        },
        {
          "name": "RHSA-2017:2553",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2553"
        },
        {
          "name": "RHSA-2017:2418",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2418"
        },
        {
          "name": "RHSA-2017:2648",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2648"
        },
        {
          "name": "RHSA-2017:2665",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2665"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-9263",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2698",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2698"
            },
            {
              "name": "RHSA-2017:2727",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2727"
            },
            {
              "name": "RHSA-2017:2692",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2692"
            },
            {
              "name": "RHSA-2017:2553",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2553"
            },
            {
              "name": "RHSA-2017:2418",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2418"
            },
            {
              "name": "RHSA-2017:2648",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2648"
            },
            {
              "name": "RHSA-2017:2665",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2665"
            },
            {
              "name": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html",
              "refsource": "CONFIRM",
              "url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-9263",
    "datePublished": "2017-05-29T03:52:00.000Z",
    "dateReserved": "2017-05-28T00:00:00.000Z",
    "dateUpdated": "2024-08-05T17:02:44.177Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2017-9263",
      "date": "2026-11-05",
      "epss": "0.01008",
      "percentile": "0.63194"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:openvswitch:openvswitch:2.7.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "C3C92CDE-F125-490D-9B70-AEAAA6947352",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch."
        },
        {
          "lang": "es",
          "value": "En Open vSwitch (OvS) versi\u00f3n 2.7.0, mientras se analiza un mensaje de estado de rol de OpenFlow, se llama a la funci\u00f3n abort() por motivos de estado de rol indefinido en la funci\u00f3n \u201cofp_print_role_status_message\u201d en la biblioteca \u201clib/ofp-print.c\u201d que puede ser aprovechada para un ataque de DoS remota mediante una interrupci\u00f3n maliciosa."
        }
      ],
      "id": "CVE-2017-9263",
      "lastModified": "2024-11-21T03:35:42.780",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": true,
            "baseSeverity": "LOW",
            "cvssData": {
              "accessComplexity": "LOW",
              "accessVector": "ADJACENT_NETWORK",
              "authentication": "NONE",
              "availabilityImpact": "PARTIAL",
              "baseScore": 3.3,
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:P",
              "version": "2.0"
            },
            "exploitabilityScore": 6.5,
            "impactScore": 2.9,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ],
        "cvssMetricV30": [
          {
            "cvssData": {
              "attackComplexity": "LOW",
              "attackVector": "ADJACENT_NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.0"
            },
            "exploitabilityScore": 2.8,
            "impactScore": 3.6,
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      },
      "published": "2017-05-29T04:29:00.353",
      "references": [
        {
          "source": "cve@mitre.org",
          "url": "https://access.redhat.com/errata/RHSA-2017:2418"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://access.redhat.com/errata/RHSA-2017:2553"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://access.redhat.com/errata/RHSA-2017:2648"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://access.redhat.com/errata/RHSA-2017:2665"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://access.redhat.com/errata/RHSA-2017:2692"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://access.redhat.com/errata/RHSA-2017:2698"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://access.redhat.com/errata/RHSA-2017:2727"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Mailing List",
            "Patch",
            "Vendor Advisory"
          ],
          "url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://access.redhat.com/errata/RHSA-2017:2418"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://access.redhat.com/errata/RHSA-2017:2553"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://access.redhat.com/errata/RHSA-2017:2648"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://access.redhat.com/errata/RHSA-2017:2665"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://access.redhat.com/errata/RHSA-2017:2692"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://access.redhat.com/errata/RHSA-2017:2698"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://access.redhat.com/errata/RHSA-2017:2727"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Mailing List",
            "Patch",
            "Vendor Advisory"
          ],
          "url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html"
        }
      ],
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-20"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:openvswitch:openvswitch:2.7.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C3C92CDE-F125-490D-9B70-AEAAA6947352",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch."
          },
          {
            "lang": "es",
            "value": "En Open vSwitch (OvS) versi\u00f3n 2.7.0, mientras se analiza un mensaje de estado de rol de OpenFlow, se llama a la funci\u00f3n abort() por motivos de estado de rol indefinido en la funci\u00f3n \u201cofp_print_role_status_message\u201d en la biblioteca \u201clib/ofp-print.c\u201d que puede ser aprovechada para un ataque de DoS remota mediante una interrupci\u00f3n maliciosa."
          }
        ],
        "id": "CVE-2017-9263",
        "lastModified": "2026-05-13T00:24:29.033",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": true,
              "baseSeverity": "LOW",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "ADJACENT_NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 3.3,
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 6.5,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV30": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "ADJACENT_NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.0"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2017-05-29T04:29:00.353",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "https://access.redhat.com/errata/RHSA-2017:2418"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://access.redhat.com/errata/RHSA-2017:2553"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://access.redhat.com/errata/RHSA-2017:2648"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://access.redhat.com/errata/RHSA-2017:2665"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://access.redhat.com/errata/RHSA-2017:2692"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://access.redhat.com/errata/RHSA-2017:2698"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://access.redhat.com/errata/RHSA-2017:2727"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Mailing List",
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://access.redhat.com/errata/RHSA-2017:2418"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://access.redhat.com/errata/RHSA-2017:2553"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://access.redhat.com/errata/RHSA-2017:2648"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://access.redhat.com/errata/RHSA-2017:2665"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://access.redhat.com/errata/RHSA-2017:2692"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://access.redhat.com/errata/RHSA-2017:2698"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://access.redhat.com/errata/RHSA-2017:2727"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mailing List",
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-20"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-06-28T06:45:39+00:00",
      "cve": "CVE-2017-9263",
      "id": "CVE-2017-9263",
      "initial_release_date": "2017-05-26T00:00:00+00:00",
      "product_status:fixed": "47",
      "product_status:known_affected": "1",
      "product_status:known_not_affected": "14",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "openvswitch: Invalid processing of a malicious OpenFlow role status message",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2017/cve-2017-9263.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-29T00:04:32Z",
      "cve": "CVE-2017-9263",
      "id": "CVE-2017-9263",
      "initial_release_date": "2023-02-15T04:44:57Z",
      "product_status:known_affected": "4",
      "product_status:known_not_affected": "27",
      "product_status:recommended": "21",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2017-9263",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2017-9263.json",
      "version": "9"
    }
  }
}

CNVD-2017-09511

Vulnerability from cnvd - Published: 2017-06-14

Title

Open vSwitch拒绝服务漏洞

Description

Open vSwitch（OvS）是一款以开源技术作为基础（遵循Apache2.0许可）的多层虚拟交换机产品，它通过编程扩展支持大规模网络自动化，标准的管理接口和协议等。 OvS 2.7.0版本中的lib/ofp-print.c文件的‘ofp_print_role_status_message’函数存在拒绝服务漏洞。远程攻击者可利用该漏洞实施拒绝服务攻击。

Severity

中

Patch Name

Open vSwitch拒绝服务漏洞的补丁

Patch Description

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html

Reference

https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html

Impacted products

Name
Open vSwitch Open vSwitch (OvS) v2.7.0

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-9263"
    }
  },
  "description": "Open vSwitch\uff08OvS\uff09\u662f\u4e00\u6b3e\u4ee5\u5f00\u6e90\u6280\u672f\u4f5c\u4e3a\u57fa\u7840\uff08\u9075\u5faaApache2.0\u8bb8\u53ef\uff09\u7684\u591a\u5c42\u865a\u62df\u4ea4\u6362\u673a\u4ea7\u54c1\uff0c\u5b83\u901a\u8fc7\u7f16\u7a0b\u6269\u5c55\u652f\u6301\u5927\u89c4\u6a21\u7f51\u7edc\u81ea\u52a8\u5316\uff0c\u6807\u51c6\u7684\u7ba1\u7406\u63a5\u53e3\u548c\u534f\u8bae\u7b49\u3002\r\n\r\nOvS 2.7.0\u7248\u672c\u4e2d\u7684lib/ofp-print.c\u6587\u4ef6\u7684\u0026lsquo;ofp_print_role_status_message\u0026rsquo;\u51fd\u6570\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5b9e\u65bd\u62d2\u7edd\u670d\u52a1\u653b\u51fb\u3002",
  "discovererName": "Bhargava Shastry",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-09511",
  "openTime": "2017-06-14",
  "patchDescription": "Open vSwitch\uff08OvS\uff09\u662f\u4e00\u6b3e\u4ee5\u5f00\u6e90\u6280\u672f\u4f5c\u4e3a\u57fa\u7840\uff08\u9075\u5faaApache2.0\u8bb8\u53ef\uff09\u7684\u591a\u5c42\u865a\u62df\u4ea4\u6362\u673a\u4ea7\u54c1\uff0c\u5b83\u901a\u8fc7\u7f16\u7a0b\u6269\u5c55\u652f\u6301\u5927\u89c4\u6a21\u7f51\u7edc\u81ea\u52a8\u5316\uff0c\u6807\u51c6\u7684\u7ba1\u7406\u63a5\u53e3\u548c\u534f\u8bae\u7b49\u3002\r\n\r\nOvS 2.7.0\u7248\u672c\u4e2d\u7684lib/ofp-print.c\u6587\u4ef6\u7684\u0026lsquo;ofp_print_role_status_message\u0026rsquo;\u51fd\u6570\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5b9e\u65bd\u62d2\u7edd\u670d\u52a1\u653b\u51fb\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Open vSwitch\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Open vSwitch Open vSwitch (OvS) v2.7.0"
  },
  "referenceLink": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html",
  "serverity": "\u4e2d",
  "submitTime": "2017-06-01",
  "title": "Open vSwitch\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}

FKIE_CVE-2017-9263

Vulnerability from fkie_nvd - Published: 2017-05-29 04:29 - Updated: 2026-06-17 01:27

Severity

6.5 (Medium) - CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

References

URL	Tags
cve@mitre.org	https://access.redhat.com/errata/RHSA-2017:2418
cve@mitre.org	https://access.redhat.com/errata/RHSA-2017:2553
cve@mitre.org	https://access.redhat.com/errata/RHSA-2017:2648
cve@mitre.org	https://access.redhat.com/errata/RHSA-2017:2665
cve@mitre.org	https://access.redhat.com/errata/RHSA-2017:2692
cve@mitre.org	https://access.redhat.com/errata/RHSA-2017:2698
cve@mitre.org	https://access.redhat.com/errata/RHSA-2017:2727
cve@mitre.org	https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html	Mailing List, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://access.redhat.com/errata/RHSA-2017:2418
af854a3a-2127-422b-91ae-364da2661108	https://access.redhat.com/errata/RHSA-2017:2553
af854a3a-2127-422b-91ae-364da2661108	https://access.redhat.com/errata/RHSA-2017:2648
af854a3a-2127-422b-91ae-364da2661108	https://access.redhat.com/errata/RHSA-2017:2665
af854a3a-2127-422b-91ae-364da2661108	https://access.redhat.com/errata/RHSA-2017:2692
af854a3a-2127-422b-91ae-364da2661108	https://access.redhat.com/errata/RHSA-2017:2698
af854a3a-2127-422b-91ae-364da2661108	https://access.redhat.com/errata/RHSA-2017:2727
af854a3a-2127-422b-91ae-364da2661108	https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html	Mailing List, Patch, Vendor Advisory

Impacted products

	Vendor	Product	Version
	openvswitch	openvswitch	2.7.0

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:openvswitch:openvswitch:2.7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C3C92CDE-F125-490D-9B70-AEAAA6947352",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch."
    },
    {
      "lang": "es",
      "value": "En Open vSwitch (OvS) versi\u00f3n 2.7.0, mientras se analiza un mensaje de estado de rol de OpenFlow, se llama a la funci\u00f3n abort() por motivos de estado de rol indefinido en la funci\u00f3n \u201cofp_print_role_status_message\u201d en la biblioteca \u201clib/ofp-print.c\u201d que puede ser aprovechada para un ataque de DoS remota mediante una interrupci\u00f3n maliciosa."
    }
  ],
  "id": "CVE-2017-9263",
  "lastModified": "2026-06-17T01:27:46.880",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": true,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "ADJACENT_NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 3.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 6.5,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "ADJACENT_NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-05-29T04:29:00.353",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "https://access.redhat.com/errata/RHSA-2017:2418"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://access.redhat.com/errata/RHSA-2017:2553"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://access.redhat.com/errata/RHSA-2017:2648"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://access.redhat.com/errata/RHSA-2017:2665"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://access.redhat.com/errata/RHSA-2017:2692"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://access.redhat.com/errata/RHSA-2017:2698"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://access.redhat.com/errata/RHSA-2017:2727"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://access.redhat.com/errata/RHSA-2017:2418"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://access.redhat.com/errata/RHSA-2017:2553"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://access.redhat.com/errata/RHSA-2017:2648"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://access.redhat.com/errata/RHSA-2017:2665"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://access.redhat.com/errata/RHSA-2017:2692"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://access.redhat.com/errata/RHSA-2017:2698"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://access.redhat.com/errata/RHSA-2017:2727"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-3R4J-WR9X-6P4F

Vulnerability from github – Published: 2022-05-14 03:53 – Updated: 2022-05-14 03:53

Details

In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function ofp_print_role_status_message in lib/ofp-print.c that may be leveraged toward a remote DoS attack by a malicious switch.

Severity

6.5 (Medium)


                  
                    CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2017-9263"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-20"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2017-05-29T04:29:00Z",
    "severity": "MODERATE"
  },
  "details": "In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch.",
  "id": "GHSA-3r4j-wr9x-6p4f",
  "modified": "2022-05-14T03:53:41Z",
  "published": "2022-05-14T03:53:41Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-9263"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:2418"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:2553"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:2648"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:2665"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:2692"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:2698"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:2727"
    },
    {
      "type": "WEB",
      "url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2017-9263

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Aliases

CVE-2017-9263

Aliases

CVE-2017-9263

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2017-9263",
    "description": "In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch.",
    "id": "GSD-2017-9263",
    "references": [
      "https://www.suse.com/security/cve/CVE-2017-9263.html",
      "https://access.redhat.com/errata/RHSA-2017:2727",
      "https://access.redhat.com/errata/RHSA-2017:2698",
      "https://access.redhat.com/errata/RHSA-2017:2692",
      "https://access.redhat.com/errata/RHSA-2017:2665",
      "https://access.redhat.com/errata/RHSA-2017:2648",
      "https://access.redhat.com/errata/RHSA-2017:2553",
      "https://access.redhat.com/errata/RHSA-2017:2418",
      "https://ubuntu.com/security/CVE-2017-9263"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2017-9263"
      ],
      "details": "In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch.",
      "id": "GSD-2017-9263",
      "modified": "2023-12-13T01:21:07.913468Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2017-9263",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "RHSA-2017:2698",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:2698"
          },
          {
            "name": "RHSA-2017:2727",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:2727"
          },
          {
            "name": "RHSA-2017:2692",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:2692"
          },
          {
            "name": "RHSA-2017:2553",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:2553"
          },
          {
            "name": "RHSA-2017:2418",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:2418"
          },
          {
            "name": "RHSA-2017:2648",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:2648"
          },
          {
            "name": "RHSA-2017:2665",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:2665"
          },
          {
            "name": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html",
            "refsource": "CONFIRM",
            "url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:openvswitch:openvswitch:2.7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-9263"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-20"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html",
              "refsource": "CONFIRM",
              "tags": [
                "Mailing List",
                "Patch",
                "Vendor Advisory"
              ],
              "url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html"
            },
            {
              "name": "RHSA-2017:2727",
              "refsource": "REDHAT",
              "tags": [],
              "url": "https://access.redhat.com/errata/RHSA-2017:2727"
            },
            {
              "name": "RHSA-2017:2698",
              "refsource": "REDHAT",
              "tags": [],
              "url": "https://access.redhat.com/errata/RHSA-2017:2698"
            },
            {
              "name": "RHSA-2017:2692",
              "refsource": "REDHAT",
              "tags": [],
              "url": "https://access.redhat.com/errata/RHSA-2017:2692"
            },
            {
              "name": "RHSA-2017:2665",
              "refsource": "REDHAT",
              "tags": [],
              "url": "https://access.redhat.com/errata/RHSA-2017:2665"
            },
            {
              "name": "RHSA-2017:2648",
              "refsource": "REDHAT",
              "tags": [],
              "url": "https://access.redhat.com/errata/RHSA-2017:2648"
            },
            {
              "name": "RHSA-2017:2553",
              "refsource": "REDHAT",
              "tags": [],
              "url": "https://access.redhat.com/errata/RHSA-2017:2553"
            },
            {
              "name": "RHSA-2017:2418",
              "refsource": "REDHAT",
              "tags": [],
              "url": "https://access.redhat.com/errata/RHSA-2017:2418"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": true,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 3.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 6.5,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "LOW",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2018-01-05T02:31Z",
      "publishedDate": "2017-05-29T04:29Z"
    }
  }
}

RHSA-2017:2418

Vulnerability from csaf_redhat - Published: 2017-08-03 12:35 - Updated: 2026-06-28 12:22

Summary

Red Hat Security Advisory: openvswitch security, bug fix, and enhancement update

Severity

Moderate

Scope

4 vulnerabilities in this advisory, including CVE-2017-9263.

CVE-2017-9263

While parsing an OpenFlow role status message Open vSwitch (OvS), a call to the abort() function for undefined role status reasons in the function 'ofp_print_role_status_message' in 'lib/ofp-print.c' could be misused for a remote denial of service attack by a malicious switch.

5.9 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Fixed: 18 products

https://access.redhat.com/errata/RHSA-2017:2418

Open the full advisory

RHSA-2017:2553

Vulnerability from csaf_redhat - Published: 2017-08-30 13:59 - Updated: 2026-06-28 12:23

Summary

Red Hat Security Advisory: openvswitch security update

Severity

Moderate

Scope

3 vulnerabilities in this advisory, including CVE-2017-9263.

CVE-2017-9263

5.9 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Fixed: 4 products

https://access.redhat.com/errata/RHSA-2017:2553

Open the full advisory

RHSA-2017:2648

Vulnerability from csaf_redhat - Published: 2017-09-06 16:53 - Updated: 2026-06-28 12:26

Summary

Red Hat Security Advisory: openvswitch security and bug fix update

Severity

Moderate

Scope

4 vulnerabilities in this advisory, including CVE-2017-9263.

CVE-2017-9263

5.9 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Fixed: 4 products

https://access.redhat.com/errata/RHSA-2017:2648

Open the full advisory

RHSA-2017:2665

Vulnerability from csaf_redhat - Published: 2017-09-06 17:49 - Updated: 2026-06-28 12:26

Summary

Red Hat Security Advisory: openvswitch security update

Severity

Moderate

Scope

3 vulnerabilities in this advisory, including CVE-2017-9263.

CVE-2017-9263

5.9 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Fixed: 4 products

https://access.redhat.com/errata/RHSA-2017:2665

Open the full advisory

RHSA-2017:2692

Vulnerability from csaf_redhat - Published: 2017-09-12 17:11 - Updated: 2026-06-28 12:08

Summary

Red Hat Security Advisory: openvswitch security update

Severity

Moderate

Scope

3 vulnerabilities in this advisory, including CVE-2017-9263.

CVE-2017-9263

5.9 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Fixed: 4 products

https://access.redhat.com/errata/RHSA-2017:2692

Open the full advisory

RHSA-2017:2698

Vulnerability from csaf_redhat - Published: 2017-09-12 17:20 - Updated: 2026-06-28 12:08

Summary

Red Hat Security Advisory: openvswitch security update

Severity

Moderate

Scope

3 vulnerabilities in this advisory, including CVE-2017-9263.

CVE-2017-9263

5.9 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Fixed: 4 products

https://access.redhat.com/errata/RHSA-2017:2698

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2017-9263 (GCVE-0-2017-9263)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour