Action not permitted
Modal body text goes here.
cve-2017-9264
Vulnerability from cvelistv5
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-05T17:02:44.204Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "RHSA-2017:2727", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2017:2727" }, { "name": "RHSA-2017:2418", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2017:2418" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-March/329323.html" }, { "name": "RHSA-2017:2648", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2017:2648" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2017-05-28T00:00:00", "descriptions": [ { "lang": "en", "value": "In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions `extract_l3_ipv6`, `extract_l4_tcp`, and `extract_l4_udp` that can be triggered remotely." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2018-01-04T19:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre" }, "references": [ { "name": "RHSA-2017:2727", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2017:2727" }, { "name": "RHSA-2017:2418", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2017:2418" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-March/329323.html" }, { "name": "RHSA-2017:2648", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2017:2648" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2017-9264", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions `extract_l3_ipv6`, `extract_l4_tcp`, and `extract_l4_udp` that can be triggered remotely." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "RHSA-2017:2727", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:2727" }, { "name": "RHSA-2017:2418", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:2418" }, { "name": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-March/329323.html", "refsource": "CONFIRM", "url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-March/329323.html" }, { "name": "RHSA-2017:2648", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:2648" } ] } } } }, "cveMetadata": { "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2017-9264", "datePublished": "2017-05-29T03:52:00", "dateReserved": "2017-05-28T00:00:00", "dateUpdated": "2024-08-05T17:02:44.204Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2017-9264\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2017-05-29T04:29:00.400\",\"lastModified\":\"2019-10-03T00:03:26.223\",\"vulnStatus\":\"Modified\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions `extract_l3_ipv6`, `extract_l4_tcp`, and `extract_l4_udp` that can be triggered remotely.\"},{\"lang\":\"es\",\"value\":\"En la biblioteca lib/conntrack.c en la implementaci\u00f3n del firewall en Open vSwitch (OvS) versi\u00f3n 2.6.1, se presenta una lectura excesiva del b\u00fafer mientras se analizan los paquetes TCP, UDP e IPv6 malformados en las funciones \u201cextract_l3_ipv6\u201d, \u201cextract_l4_tcp\u201d y \u201cextract_l4_udp\u201d que pueden ser activadas remotamente.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\",\"baseScore\":7.5},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":true,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openvswitch:openvswitch:2.6.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E6701F4D-8561-496B-8AEC-B23A149EC675\"}]}]}],\"references\":[{\"url\":\"https://access.redhat.com/errata/RHSA-2017:2418\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:2648\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:2727\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://mail.openvswitch.org/pipermail/ovs-dev/2017-March/329323.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Patch\",\"Vendor Advisory\"]}]}}" } }
ghsa-r4pw-w7qg-248f
Vulnerability from github
In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions extract_l3_ipv6
, extract_l4_tcp
, and extract_l4_udp
that can be triggered remotely.
{ "affected": [], "aliases": [ "CVE-2017-9264" ], "database_specific": { "cwe_ids": [ "CWE-125" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2017-05-29T04:29:00Z", "severity": "CRITICAL" }, "details": "In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions `extract_l3_ipv6`, `extract_l4_tcp`, and `extract_l4_udp` that can be triggered remotely.", "id": "GHSA-r4pw-w7qg-248f", "modified": "2022-05-13T01:47:52Z", "published": "2022-05-13T01:47:52Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-9264" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2017:2418" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2017:2648" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2017:2727" }, { "type": "WEB", "url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-March/329323.html" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "type": "CVSS_V3" } ] }
rhsa-2017_2418
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openvswitch is now available for Fast Datapath for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.\n\nThe following packages have been upgraded to a later upstream version: openvswitch (2.7.2). (BZ#1472854)\n\nSecurity Fix(es):\n\n* An unsigned int wrap around leading to a buffer over-read was found when parsing OFPT_QUEUE_GET_CONFIG_REPLY messages in Open vSwitch (OvS). An attacker could use this flaw to cause a remote DoS. (CVE-2017-9214)\n\n* In Open vSwitch (OvS), while parsing an OpenFlow role status message there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch. (CVE-2017-9263)\n\n* A buffer over-read was found in the Open vSwitch (OvS) firewall implementation. This flaw can be triggered by parsing a specially crafted TCP, UDP, or IPv6 packet. A remote attack could use this flaw to cause a Denial of Service (DoS). (CVE-2017-9264)\n\n* A buffer over-read flaw was found in Open vSwitch (OvS) while parsing the group mod OpenFlow messages sent from the controller. An attacker could use this flaw to cause a Denial of Service (DoS). (CVE-2017-9265)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2017:2418", "url": "https://access.redhat.com/errata/RHSA-2017:2418" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1456795", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1456795" }, { "category": "external", "summary": "1457327", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457327" }, { "category": "external", "summary": "1457329", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457329" }, { "category": "external", "summary": "1457335", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457335" }, { "category": "external", "summary": "1472729", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472729" }, { "category": "external", "summary": "1472854", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472854" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2418.json" } ], "title": "Red Hat Security Advisory: openvswitch security, bug fix, and enhancement update", "tracking": { "current_release_date": "2024-11-14T23:36:47+00:00", "generator": { "date": "2024-11-14T23:36:47+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2017:2418", "initial_release_date": "2017-08-03T12:35:07+00:00", "revision_history": [ { "date": "2017-08-03T12:35:07+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-08-03T12:35:07+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T23:36:47+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Fast Datapath for Red Hat Enterprise Linux 7", "product": { "name": "Fast Datapath for Red Hat Enterprise Linux 7", "product_id": "7Server-RH7-Fast-Datapath", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::fastdatapath" } } }, { "category": "product_name", "name": "Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts", "product": { "name": "Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts", "product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::hypervisor" } } } ], "category": "product_family", "name": "Fast Datapath" }, { "branches": [ { "category": "product_version", "name": "openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "product": { "name": "openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "product_id": "openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openvswitch-ovn-common@2.7.2-1.git20170719.el7fdp?arch=x86_64" } } }, { "category": "product_version", "name": "openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "product": { "name": "openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "product_id": "openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openvswitch@2.7.2-1.git20170719.el7fdp?arch=x86_64" } } }, { "category": "product_version", "name": "openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "product": { "name": "openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "product_id": "openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openvswitch-ovn-vtep@2.7.2-1.git20170719.el7fdp?arch=x86_64" } } }, { "category": "product_version", "name": "openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "product": { "name": "openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "product_id": "openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openvswitch-ovn-docker@2.7.2-1.git20170719.el7fdp?arch=x86_64" } } }, { "category": "product_version", "name": "openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "product": { "name": "openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "product_id": "openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openvswitch-devel@2.7.2-1.git20170719.el7fdp?arch=x86_64" } } }, { "category": "product_version", "name": "openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "product": { "name": "openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "product_id": "openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openvswitch-ovn-host@2.7.2-1.git20170719.el7fdp?arch=x86_64" } } }, { "category": "product_version", "name": "openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "product": { "name": "openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "product_id": "openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openvswitch-debuginfo@2.7.2-1.git20170719.el7fdp?arch=x86_64" } } }, { "category": "product_version", "name": "openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "product": { "name": "openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "product_id": "openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openvswitch-ovn-central@2.7.2-1.git20170719.el7fdp?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "product": { "name": "openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "product_id": "openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openvswitch@2.7.2-1.git20170719.el7fdp?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "product": { "name": "openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "product_id": "openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openvswitch-test@2.7.2-1.git20170719.el7fdp?arch=noarch" } } }, { "category": "product_version", "name": "python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch", "product": { "name": "python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch", "product_id": "python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-openvswitch@2.7.2-1.git20170719.el7fdp?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openvswitch-0:2.7.2-1.git20170719.el7fdp.src as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts", "product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.src" }, "product_reference": "openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts", "product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64" }, "product_reference": "openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts", "product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64" }, "product_reference": "openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts", "product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64" }, "product_reference": "openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts", "product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64" }, "product_reference": "openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts", "product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64" }, "product_reference": "openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts", "product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64" }, "product_reference": "openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts", "product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64" }, "product_reference": "openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts", "product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64" }, "product_reference": "openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts", "product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch" }, "product_reference": "openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus" }, { "category": "default_component_of", "full_product_name": { "name": "python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts", "product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch" }, "product_reference": "python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch", "relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-0:2.7.2-1.git20170719.el7fdp.src as a component of Fast Datapath for Red Hat Enterprise Linux 7", "product_id": "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.src" }, "product_reference": "openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "relates_to_product_reference": "7Server-RH7-Fast-Datapath" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7", "product_id": "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64" }, "product_reference": "openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "relates_to_product_reference": "7Server-RH7-Fast-Datapath" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7", "product_id": "7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64" }, "product_reference": "openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "relates_to_product_reference": "7Server-RH7-Fast-Datapath" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7", "product_id": "7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64" }, "product_reference": "openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "relates_to_product_reference": "7Server-RH7-Fast-Datapath" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7", "product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64" }, "product_reference": "openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "relates_to_product_reference": "7Server-RH7-Fast-Datapath" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7", "product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64" }, "product_reference": "openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "relates_to_product_reference": "7Server-RH7-Fast-Datapath" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7", "product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64" }, "product_reference": "openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "relates_to_product_reference": "7Server-RH7-Fast-Datapath" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7", "product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64" }, "product_reference": "openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "relates_to_product_reference": "7Server-RH7-Fast-Datapath" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7", "product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64" }, "product_reference": "openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "relates_to_product_reference": "7Server-RH7-Fast-Datapath" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch as a component of Fast Datapath for Red Hat Enterprise Linux 7", "product_id": "7Server-RH7-Fast-Datapath:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch" }, "product_reference": "openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "relates_to_product_reference": "7Server-RH7-Fast-Datapath" }, { "category": "default_component_of", "full_product_name": { "name": "python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch as a component of Fast Datapath for Red Hat Enterprise Linux 7", "product_id": "7Server-RH7-Fast-Datapath:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch" }, "product_reference": "python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch", "relates_to_product_reference": "7Server-RH7-Fast-Datapath" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-9214", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "discovery_date": "2017-05-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1456795" } ], "notes": [ { "category": "description", "text": "An unsigned integer wrap around that led to a buffer over-read was found when parsing OFPT_QUEUE_GET_CONFIG_REPLY messages in Open vSwitch (OvS). An attacker could use this issue to cause a remote denial of service attack.", "title": "Vulnerability description" }, { "category": "summary", "text": "openvswitch: Integer underflow in the ofputil_pull_queue_get_config_reply10 function", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-9214" }, { "category": "external", "summary": "RHBZ#1456795", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1456795" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-9214", "url": "https://www.cve.org/CVERecord?id=CVE-2017-9214" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-9214", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-9214" } ], "release_date": "2017-05-20T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-08-03T12:35:07+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2418" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openvswitch: Integer underflow in the ofputil_pull_queue_get_config_reply10 function" }, { "cve": "CVE-2017-9263", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2017-05-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1457327" } ], "notes": [ { "category": "description", "text": "While parsing an OpenFlow role status message Open vSwitch (OvS), a call to the abort() function for undefined role status reasons in the function \u0027ofp_print_role_status_message\u0027 in \u0027lib/ofp-print.c\u0027 could be misused for a remote denial of service attack by a malicious switch.", "title": "Vulnerability description" }, { "category": "summary", "text": "openvswitch: Invalid processing of a malicious OpenFlow role status message", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-9263" }, { "category": "external", "summary": "RHBZ#1457327", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457327" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-9263", "url": "https://www.cve.org/CVERecord?id=CVE-2017-9263" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-9263", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-9263" } ], "release_date": "2017-05-26T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-08-03T12:35:07+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2418" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openvswitch: Invalid processing of a malicious OpenFlow role status message" }, { "cve": "CVE-2017-9264", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2017-05-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1457329" } ], "notes": [ { "category": "description", "text": "A buffer over-read was found in the Open vSwitch (OvS) firewall implementation. This flaw can be triggered by parsing a specially crafted TCP, UDP, or IPv6 packet. A remote attack could use this flaw to cause a Denial of Service (DoS).", "title": "Vulnerability description" }, { "category": "summary", "text": "openvswitch: Buffer over-read while parsing malformed TCP, UDP and IPv6 packets", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-9264" }, { "category": "external", "summary": "RHBZ#1457329", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457329" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-9264", "url": "https://www.cve.org/CVERecord?id=CVE-2017-9264" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-9264", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-9264" } ], "release_date": "2017-03-03T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-08-03T12:35:07+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2418" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.0" }, "products": [ "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openvswitch: Buffer over-read while parsing malformed TCP, UDP and IPv6 packets" }, { "cve": "CVE-2017-9265", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2017-05-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1457335" } ], "notes": [ { "category": "description", "text": "A buffer over-read issue was found in Open vSwitch (OvS) which emerged while parsing the GroupMod OpenFlow messages sent from the controller. The issue could enable an attacker to cause a denial of service type of attack.", "title": "Vulnerability description" }, { "category": "summary", "text": "openvswitch: Buffer over-read while parsing the group mod OpenFlow message", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-9265" }, { "category": "external", "summary": "RHBZ#1457335", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457335" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-9265", "url": "https://www.cve.org/CVERecord?id=CVE-2017-9265" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-9265", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-9265" } ], "release_date": "2017-05-26T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-08-03T12:35:07+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2418" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.0" }, "products": [ "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.src", "7Server-RH7-Fast-Datapath:openvswitch-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-docker-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.7.2-1.git20170719.el7fdp.x86_64", "7Server-RH7-Fast-Datapath:openvswitch-test-0:2.7.2-1.git20170719.el7fdp.noarch", "7Server-RH7-Fast-Datapath:python-openvswitch-0:2.7.2-1.git20170719.el7fdp.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openvswitch: Buffer over-read while parsing the group mod OpenFlow message" } ] }
rhsa-2017_2727
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openvswitch is now available for Red Hat OpenStack Platform 11.0 (Ocata).\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.\n\nSecurity Fix(es):\n\n* An unsigned integer wrap around that led to a buffer over-read was found when parsing OFPT_QUEUE_GET_CONFIG_REPLY messages in Open vSwitch (OvS). An attacker could use this issue to cause a remote denial of service attack. (CVE-2017-9214)\n\n* While parsing an OpenFlow role status message Open vSwitch (OvS), a call to the abort() function for undefined role status reasons in the function \u0027ofp_print_role_status_message\u0027 in \u0027lib/ofp-print.c\u0027 could be misused for a remote denial of service attack by a malicious switch. (CVE-2017-9263)\n\n* A buffer over-read was found in the Open vSwitch (OvS) firewall implementation. This flaw can be triggered by parsing a specially crafted TCP, UDP, or IPv6 packet. A remote attack could use this flaw to cause a Denial of Service (DoS). (CVE-2017-9264)\n\n* A buffer over-read issue was found in Open vSwitch (OvS) which emerged while parsing the GroupMod OpenFlow messages sent from the controller. The issue could enable an attacker to cause a denial of service type of attack. (CVE-2017-9265)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2017:2727", "url": "https://access.redhat.com/errata/RHSA-2017:2727" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1456795", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1456795" }, { "category": "external", "summary": "1457327", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457327" }, { "category": "external", "summary": "1457329", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457329" }, { "category": "external", "summary": "1457335", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457335" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2727.json" } ], "title": "Red Hat Security Advisory: openvswitch security update", "tracking": { "current_release_date": "2024-11-14T23:37:46+00:00", "generator": { "date": "2024-11-14T23:37:46+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2017:2727", "initial_release_date": "2017-09-13T21:39:00+00:00", "revision_history": [ { "date": "2017-09-13T21:39:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-09-13T21:39:00+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T23:37:46+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenStack Platform 11.0", "product": { "name": "Red Hat OpenStack Platform 11.0", "product_id": "7Server-RH7-RHOS-11.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:11::el7" } } } ], "category": "product_family", "name": "Red Hat OpenStack Platform" }, { "branches": [ { "category": "product_version", "name": "openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "product": { "name": "openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "product_id": "openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openvswitch@2.6.1-13.git20161206.el7ost?arch=x86_64" } } }, { "category": "product_version", "name": "openvswitch-ovn-central-0:2.6.1-13.git20161206.el7ost.x86_64", "product": { "name": "openvswitch-ovn-central-0:2.6.1-13.git20161206.el7ost.x86_64", "product_id": "openvswitch-ovn-central-0:2.6.1-13.git20161206.el7ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openvswitch-ovn-central@2.6.1-13.git20161206.el7ost?arch=x86_64" } } }, { "category": "product_version", "name": "openvswitch-ovn-host-0:2.6.1-13.git20161206.el7ost.x86_64", "product": { "name": "openvswitch-ovn-host-0:2.6.1-13.git20161206.el7ost.x86_64", "product_id": "openvswitch-ovn-host-0:2.6.1-13.git20161206.el7ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openvswitch-ovn-host@2.6.1-13.git20161206.el7ost?arch=x86_64" } } }, { "category": "product_version", "name": "openvswitch-ovn-common-0:2.6.1-13.git20161206.el7ost.x86_64", "product": { "name": "openvswitch-ovn-common-0:2.6.1-13.git20161206.el7ost.x86_64", "product_id": "openvswitch-ovn-common-0:2.6.1-13.git20161206.el7ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openvswitch-ovn-common@2.6.1-13.git20161206.el7ost?arch=x86_64" } } }, { "category": "product_version", "name": "openvswitch-ovn-vtep-0:2.6.1-13.git20161206.el7ost.x86_64", "product": { "name": "openvswitch-ovn-vtep-0:2.6.1-13.git20161206.el7ost.x86_64", "product_id": "openvswitch-ovn-vtep-0:2.6.1-13.git20161206.el7ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openvswitch-ovn-vtep@2.6.1-13.git20161206.el7ost?arch=x86_64" } } }, { "category": "product_version", "name": "openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "product": { "name": "openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "product_id": "openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openvswitch-debuginfo@2.6.1-13.git20161206.el7ost?arch=x86_64" } } }, { "category": "product_version", "name": "openvswitch-ovn-docker-0:2.6.1-13.git20161206.el7ost.x86_64", "product": { "name": "openvswitch-ovn-docker-0:2.6.1-13.git20161206.el7ost.x86_64", "product_id": "openvswitch-ovn-docker-0:2.6.1-13.git20161206.el7ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openvswitch-ovn-docker@2.6.1-13.git20161206.el7ost?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openvswitch-0:2.6.1-13.git20161206.el7ost.src", "product": { "name": "openvswitch-0:2.6.1-13.git20161206.el7ost.src", "product_id": "openvswitch-0:2.6.1-13.git20161206.el7ost.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openvswitch@2.6.1-13.git20161206.el7ost?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch", "product": { "name": "python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch", "product_id": "python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-openvswitch@2.6.1-13.git20161206.el7ost?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openvswitch-0:2.6.1-13.git20161206.el7ost.src as a component of Red Hat OpenStack Platform 11.0", "product_id": "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src" }, "product_reference": "openvswitch-0:2.6.1-13.git20161206.el7ost.src", "relates_to_product_reference": "7Server-RH7-RHOS-11.0" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64 as a component of Red Hat OpenStack Platform 11.0", "product_id": "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64" }, "product_reference": "openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-11.0" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64 as a component of Red Hat OpenStack Platform 11.0", "product_id": "7Server-RH7-RHOS-11.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64" }, "product_reference": "openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-11.0" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-ovn-central-0:2.6.1-13.git20161206.el7ost.x86_64 as a component of Red Hat OpenStack Platform 11.0", "product_id": "7Server-RH7-RHOS-11.0:openvswitch-ovn-central-0:2.6.1-13.git20161206.el7ost.x86_64" }, "product_reference": "openvswitch-ovn-central-0:2.6.1-13.git20161206.el7ost.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-11.0" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-ovn-common-0:2.6.1-13.git20161206.el7ost.x86_64 as a component of Red Hat OpenStack Platform 11.0", "product_id": "7Server-RH7-RHOS-11.0:openvswitch-ovn-common-0:2.6.1-13.git20161206.el7ost.x86_64" }, "product_reference": "openvswitch-ovn-common-0:2.6.1-13.git20161206.el7ost.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-11.0" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-ovn-docker-0:2.6.1-13.git20161206.el7ost.x86_64 as a component of Red Hat OpenStack Platform 11.0", "product_id": "7Server-RH7-RHOS-11.0:openvswitch-ovn-docker-0:2.6.1-13.git20161206.el7ost.x86_64" }, "product_reference": "openvswitch-ovn-docker-0:2.6.1-13.git20161206.el7ost.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-11.0" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-ovn-host-0:2.6.1-13.git20161206.el7ost.x86_64 as a component of Red Hat OpenStack Platform 11.0", "product_id": "7Server-RH7-RHOS-11.0:openvswitch-ovn-host-0:2.6.1-13.git20161206.el7ost.x86_64" }, "product_reference": "openvswitch-ovn-host-0:2.6.1-13.git20161206.el7ost.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-11.0" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-ovn-vtep-0:2.6.1-13.git20161206.el7ost.x86_64 as a component of Red Hat OpenStack Platform 11.0", "product_id": "7Server-RH7-RHOS-11.0:openvswitch-ovn-vtep-0:2.6.1-13.git20161206.el7ost.x86_64" }, "product_reference": "openvswitch-ovn-vtep-0:2.6.1-13.git20161206.el7ost.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-11.0" }, { "category": "default_component_of", "full_product_name": { "name": "python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch as a component of Red Hat OpenStack Platform 11.0", "product_id": "7Server-RH7-RHOS-11.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" }, "product_reference": "python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch", "relates_to_product_reference": "7Server-RH7-RHOS-11.0" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-9214", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "discovery_date": "2017-05-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1456795" } ], "notes": [ { "category": "description", "text": "An unsigned integer wrap around that led to a buffer over-read was found when parsing OFPT_QUEUE_GET_CONFIG_REPLY messages in Open vSwitch (OvS). An attacker could use this issue to cause a remote denial of service attack.", "title": "Vulnerability description" }, { "category": "summary", "text": "openvswitch: Integer underflow in the ofputil_pull_queue_get_config_reply10 function", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-central-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-common-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-docker-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-host-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-vtep-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-9214" }, { "category": "external", "summary": "RHBZ#1456795", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1456795" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-9214", "url": "https://www.cve.org/CVERecord?id=CVE-2017-9214" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-9214", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-9214" } ], "release_date": "2017-05-20T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-09-13T21:39:00+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-central-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-common-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-docker-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-host-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-vtep-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2727" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-central-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-common-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-docker-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-host-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-vtep-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openvswitch: Integer underflow in the ofputil_pull_queue_get_config_reply10 function" }, { "cve": "CVE-2017-9263", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2017-05-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1457327" } ], "notes": [ { "category": "description", "text": "While parsing an OpenFlow role status message Open vSwitch (OvS), a call to the abort() function for undefined role status reasons in the function \u0027ofp_print_role_status_message\u0027 in \u0027lib/ofp-print.c\u0027 could be misused for a remote denial of service attack by a malicious switch.", "title": "Vulnerability description" }, { "category": "summary", "text": "openvswitch: Invalid processing of a malicious OpenFlow role status message", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-central-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-common-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-docker-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-host-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-vtep-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-9263" }, { "category": "external", "summary": "RHBZ#1457327", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457327" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-9263", "url": "https://www.cve.org/CVERecord?id=CVE-2017-9263" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-9263", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-9263" } ], "release_date": "2017-05-26T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-09-13T21:39:00+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-central-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-common-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-docker-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-host-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-vtep-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2727" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-central-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-common-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-docker-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-host-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-vtep-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openvswitch: Invalid processing of a malicious OpenFlow role status message" }, { "cve": "CVE-2017-9264", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2017-05-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1457329" } ], "notes": [ { "category": "description", "text": "A buffer over-read was found in the Open vSwitch (OvS) firewall implementation. This flaw can be triggered by parsing a specially crafted TCP, UDP, or IPv6 packet. A remote attack could use this flaw to cause a Denial of Service (DoS).", "title": "Vulnerability description" }, { "category": "summary", "text": "openvswitch: Buffer over-read while parsing malformed TCP, UDP and IPv6 packets", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-central-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-common-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-docker-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-host-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-vtep-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-9264" }, { "category": "external", "summary": "RHBZ#1457329", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457329" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-9264", "url": "https://www.cve.org/CVERecord?id=CVE-2017-9264" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-9264", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-9264" } ], "release_date": "2017-03-03T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-09-13T21:39:00+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-central-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-common-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-docker-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-host-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-vtep-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2727" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.0" }, "products": [ "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-central-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-common-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-docker-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-host-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-vtep-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openvswitch: Buffer over-read while parsing malformed TCP, UDP and IPv6 packets" }, { "cve": "CVE-2017-9265", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2017-05-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1457335" } ], "notes": [ { "category": "description", "text": "A buffer over-read issue was found in Open vSwitch (OvS) which emerged while parsing the GroupMod OpenFlow messages sent from the controller. The issue could enable an attacker to cause a denial of service type of attack.", "title": "Vulnerability description" }, { "category": "summary", "text": "openvswitch: Buffer over-read while parsing the group mod OpenFlow message", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-central-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-common-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-docker-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-host-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-vtep-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-9265" }, { "category": "external", "summary": "RHBZ#1457335", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457335" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-9265", "url": "https://www.cve.org/CVERecord?id=CVE-2017-9265" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-9265", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-9265" } ], "release_date": "2017-05-26T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-09-13T21:39:00+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-central-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-common-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-docker-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-host-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-vtep-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2727" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.0" }, "products": [ "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-11.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-central-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-common-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-docker-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-host-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:openvswitch-ovn-vtep-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-11.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openvswitch: Buffer over-read while parsing the group mod OpenFlow message" } ] }
rhsa-2017_2648
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openvswitch is now available for Red Hat OpenStack Platform 10.0 (Newton).\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.\n\nSecurity Fix(es):\n\n* An unsigned int wrap around leading to a buffer over-read was found when parsing OFPT_QUEUE_GET_CONFIG_REPLY messages in Open vSwitch (OvS). An attacker could use this flaw to cause a remote DoS. (CVE-2017-9214)\n\n* In Open vSwitch (OvS), while parsing an OpenFlow role status message there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch. (CVE-2017-9263)\n\n* A buffer over-read was found in the Open vSwitch (OvS) firewall implementation. This flaw can be triggered by parsing a specially crafted TCP, UDP, or IPv6 packet. A remote attack could use this flaw to cause a Denial of Service (DoS). (CVE-2017-9264)\n\n* A buffer over-read flaw was found in Open vSwitch (OvS) while parsing the group mod OpenFlow messages sent from the controller. An attacker could use this flaw to cause a Denial of Service (DoS). (CVE-2017-9265)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2017:2648", "url": "https://access.redhat.com/errata/RHSA-2017:2648" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1431490", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1431490" }, { "category": "external", "summary": "1436610", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1436610" }, { "category": "external", "summary": "1456795", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1456795" }, { "category": "external", "summary": "1457327", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457327" }, { "category": "external", "summary": "1457329", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457329" }, { "category": "external", "summary": "1457335", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457335" }, { "category": "external", "summary": "1463732", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1463732" }, { "category": "external", "summary": "1468334", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1468334" }, { "category": "external", "summary": "1468631", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1468631" }, { "category": "external", "summary": "1468751", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1468751" }, { "category": "external", "summary": "1472334", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472334" }, { "category": "external", "summary": "1472335", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472335" }, { "category": "external", "summary": "1473735", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1473735" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2648.json" } ], "title": "Red Hat Security Advisory: openvswitch security and bug fix update", "tracking": { "current_release_date": "2024-11-14T23:37:33+00:00", "generator": { "date": "2024-11-14T23:37:33+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2017:2648", "initial_release_date": "2017-09-06T16:53:24+00:00", "revision_history": [ { "date": "2017-09-06T16:53:24+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-09-06T16:53:24+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T23:37:33+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenStack Platform 10.0", "product": { "name": "Red Hat OpenStack Platform 10.0", "product_id": "7Server-RH7-RHOS-10.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:10::el7" } } } ], "category": "product_family", "name": "Red Hat OpenStack Platform" }, { "branches": [ { "category": "product_version", "name": "openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "product": { "name": "openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "product_id": "openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openvswitch@2.6.1-13.git20161206.el7ost?arch=x86_64" } } }, { "category": "product_version", "name": "openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "product": { "name": "openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "product_id": "openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openvswitch-debuginfo@2.6.1-13.git20161206.el7ost?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openvswitch-0:2.6.1-13.git20161206.el7ost.src", "product": { "name": "openvswitch-0:2.6.1-13.git20161206.el7ost.src", "product_id": "openvswitch-0:2.6.1-13.git20161206.el7ost.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openvswitch@2.6.1-13.git20161206.el7ost?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch", "product": { "name": "python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch", "product_id": "python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-openvswitch@2.6.1-13.git20161206.el7ost?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openvswitch-0:2.6.1-13.git20161206.el7ost.src as a component of Red Hat OpenStack Platform 10.0", "product_id": "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src" }, "product_reference": "openvswitch-0:2.6.1-13.git20161206.el7ost.src", "relates_to_product_reference": "7Server-RH7-RHOS-10.0" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64 as a component of Red Hat OpenStack Platform 10.0", "product_id": "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64" }, "product_reference": "openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-10.0" }, { "category": "default_component_of", "full_product_name": { "name": "openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64 as a component of Red Hat OpenStack Platform 10.0", "product_id": "7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64" }, "product_reference": "openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-10.0" }, { "category": "default_component_of", "full_product_name": { "name": "python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0", "product_id": "7Server-RH7-RHOS-10.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" }, "product_reference": "python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch", "relates_to_product_reference": "7Server-RH7-RHOS-10.0" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-9214", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "discovery_date": "2017-05-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1456795" } ], "notes": [ { "category": "description", "text": "An unsigned integer wrap around that led to a buffer over-read was found when parsing OFPT_QUEUE_GET_CONFIG_REPLY messages in Open vSwitch (OvS). An attacker could use this issue to cause a remote denial of service attack.", "title": "Vulnerability description" }, { "category": "summary", "text": "openvswitch: Integer underflow in the ofputil_pull_queue_get_config_reply10 function", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-9214" }, { "category": "external", "summary": "RHBZ#1456795", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1456795" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-9214", "url": "https://www.cve.org/CVERecord?id=CVE-2017-9214" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-9214", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-9214" } ], "release_date": "2017-05-20T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-09-06T16:53:24+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2648" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openvswitch: Integer underflow in the ofputil_pull_queue_get_config_reply10 function" }, { "cve": "CVE-2017-9263", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2017-05-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1457327" } ], "notes": [ { "category": "description", "text": "While parsing an OpenFlow role status message Open vSwitch (OvS), a call to the abort() function for undefined role status reasons in the function \u0027ofp_print_role_status_message\u0027 in \u0027lib/ofp-print.c\u0027 could be misused for a remote denial of service attack by a malicious switch.", "title": "Vulnerability description" }, { "category": "summary", "text": "openvswitch: Invalid processing of a malicious OpenFlow role status message", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-9263" }, { "category": "external", "summary": "RHBZ#1457327", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457327" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-9263", "url": "https://www.cve.org/CVERecord?id=CVE-2017-9263" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-9263", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-9263" } ], "release_date": "2017-05-26T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-09-06T16:53:24+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2648" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openvswitch: Invalid processing of a malicious OpenFlow role status message" }, { "cve": "CVE-2017-9264", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2017-05-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1457329" } ], "notes": [ { "category": "description", "text": "A buffer over-read was found in the Open vSwitch (OvS) firewall implementation. This flaw can be triggered by parsing a specially crafted TCP, UDP, or IPv6 packet. A remote attack could use this flaw to cause a Denial of Service (DoS).", "title": "Vulnerability description" }, { "category": "summary", "text": "openvswitch: Buffer over-read while parsing malformed TCP, UDP and IPv6 packets", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-9264" }, { "category": "external", "summary": "RHBZ#1457329", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457329" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-9264", "url": "https://www.cve.org/CVERecord?id=CVE-2017-9264" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-9264", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-9264" } ], "release_date": "2017-03-03T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-09-06T16:53:24+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2648" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.0" }, "products": [ "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openvswitch: Buffer over-read while parsing malformed TCP, UDP and IPv6 packets" }, { "cve": "CVE-2017-9265", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2017-05-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1457335" } ], "notes": [ { "category": "description", "text": "A buffer over-read issue was found in Open vSwitch (OvS) which emerged while parsing the GroupMod OpenFlow messages sent from the controller. The issue could enable an attacker to cause a denial of service type of attack.", "title": "Vulnerability description" }, { "category": "summary", "text": "openvswitch: Buffer over-read while parsing the group mod OpenFlow message", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-9265" }, { "category": "external", "summary": "RHBZ#1457335", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457335" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-9265", "url": "https://www.cve.org/CVERecord?id=CVE-2017-9265" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-9265", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-9265" } ], "release_date": "2017-05-26T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-09-06T16:53:24+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:2648" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.0" }, "products": [ "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.src", "7Server-RH7-RHOS-10.0:openvswitch-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.6.1-13.git20161206.el7ost.x86_64", "7Server-RH7-RHOS-10.0:python-openvswitch-0:2.6.1-13.git20161206.el7ost.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openvswitch: Buffer over-read while parsing the group mod OpenFlow message" } ] }
gsd-2017-9264
Vulnerability from gsd
{ "GSD": { "alias": "CVE-2017-9264", "description": "In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions `extract_l3_ipv6`, `extract_l4_tcp`, and `extract_l4_udp` that can be triggered remotely.", "id": "GSD-2017-9264", "references": [ "https://access.redhat.com/errata/RHSA-2017:2727", "https://access.redhat.com/errata/RHSA-2017:2648", "https://access.redhat.com/errata/RHSA-2017:2418", "https://ubuntu.com/security/CVE-2017-9264" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2017-9264" ], "details": "In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions `extract_l3_ipv6`, `extract_l4_tcp`, and `extract_l4_udp` that can be triggered remotely.", "id": "GSD-2017-9264", "modified": "2023-12-13T01:21:08.115218Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2017-9264", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions `extract_l3_ipv6`, `extract_l4_tcp`, and `extract_l4_udp` that can be triggered remotely." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "RHSA-2017:2727", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:2727" }, { "name": "RHSA-2017:2418", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:2418" }, { "name": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-March/329323.html", "refsource": "CONFIRM", "url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-March/329323.html" }, { "name": "RHSA-2017:2648", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:2648" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:openvswitch:openvswitch:2.6.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2017-9264" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions `extract_l3_ipv6`, `extract_l4_tcp`, and `extract_l4_udp` that can be triggered remotely." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-125" } ] } ] }, "references": { "reference_data": [ { "name": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-March/329323.html", "refsource": "CONFIRM", "tags": [ "Mailing List", "Patch", "Vendor Advisory" ], "url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-March/329323.html" }, { "name": "RHSA-2017:2727", "refsource": "REDHAT", "tags": [], "url": "https://access.redhat.com/errata/RHSA-2017:2727" }, { "name": "RHSA-2017:2648", "refsource": "REDHAT", "tags": [], "url": "https://access.redhat.com/errata/RHSA-2017:2648" }, { "name": "RHSA-2017:2418", "refsource": "REDHAT", "tags": [], "url": "https://access.redhat.com/errata/RHSA-2017:2418" } ] } }, "impact": { "baseMetricV2": { "acInsufInfo": true, "cvssV2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "userInteractionRequired": false }, "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "exploitabilityScore": 3.9, "impactScore": 5.9 } }, "lastModifiedDate": "2019-10-03T00:03Z", "publishedDate": "2017-05-29T04:29Z" } } }
var-201705-3789
Vulnerability from variot
In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions extract_l3_ipv6
, extract_l4_tcp
, and extract_l4_udp
that can be triggered remotely. Open vSwitch (OvS) Contains a buffer error vulnerability.Information is acquired, information is acquired, information is altered, and service operation is interrupted (DoS) There is a possibility of being put into a state. Open vSwitch is prone to the following multiple security vulnerabilities:
1. Multiple buffer-overflow vulnerabilities
2. A denial-of-service vulnerability
An attacker can exploit these issues to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will likely result in denial-of-service conditions. Open vSwitch (OvS) is a multi-layer virtual switch product based on open source technology (according to the Apache2.0 license). It supports large-scale network automation, standard management interfaces and protocols, etc. through programming extensions. The 'extract_l3_ipv6', 'extract_l4_tcp' and 'extract_l4_udp' functions of the lib/conntrack.c file in the firewall implementation process of OvS 2.6.1 version have security vulnerabilities. ==========================================================================
Ubuntu Security Notice USN-3450-1
October 11, 2017
openvswitch vulnerabilities
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 17.04
- Ubuntu 16.04 LTS
Summary:
Several security issues were fixed in Open vSwitch.
Software Description: - openvswitch: Ethernet virtual switch
Details:
Bhargava Shastry discovered that Open vSwitch incorrectly handled certain OFP messages. (CVE-2017-9214)
It was discovered that Open vSwitch incorrectly handled certain OpenFlow role messages. (CVE-2017-9263)
It was discovered that Open vSwitch incorrectly handled certain malformed packets. This issue only affected Ubuntu 17.04. (CVE-2017-9265)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 17.04: openvswitch-common 2.6.1-0ubuntu5.1
Ubuntu 16.04 LTS: openvswitch-common 2.5.2-0ubuntu0.16.04.2
In general, a standard system update will make all the necessary changes. 1473735 - ovs-vswitchd crashes with SIGSEGV randomly when adding/removing interfaces
- X-Scanned-By: MIMEDefang 2.79 on 10.5.11.11 X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.5.110.25]); Thu, 03 Aug 2017 12:39:24 +0000 (UTC)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
===================================================================== Red Hat Security Advisory
Synopsis: Moderate: openvswitch security, bug fix, and enhancement update Advisory ID: RHSA-2017:2418-01 Product: Fast Datapath Advisory URL: https://access.redhat.com/errata/RHSA-2017:2418 Issue date: 2017-08-03 CVE Names: CVE-2017-9214 CVE-2017-9263 CVE-2017-9264 CVE-2017-9265 =====================================================================
- Summary:
An update for openvswitch is now available for Fast Datapath for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
- Relevant releases/architectures:
Channel to provide early releases to layered products - noarch, x86_64
- Description:
Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.
The following packages have been upgraded to a later upstream version: openvswitch (2.7.2). (BZ#1472854)
Security Fix(es):
-
An unsigned int wrap around leading to a buffer over-read was found when parsing OFPT_QUEUE_GET_CONFIG_REPLY messages in Open vSwitch (OvS). An attacker could use this flaw to cause a remote DoS. (CVE-2017-9214)
-
In Open vSwitch (OvS), while parsing an OpenFlow role status message there is a call to the abort() function for undefined role status reasons in the function
ofp_print_role_status_message
inlib/ofp-print.c
that may be leveraged toward a remote DoS attack by a malicious switch. A remote attack could use this flaw to cause a Denial of Service (DoS). (CVE-2017-9264) -
A buffer over-read flaw was found in Open vSwitch (OvS) while parsing the group mod OpenFlow messages sent from the controller. An attacker could use this flaw to cause a Denial of Service (DoS). (CVE-2017-9265)
-
Solution:
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
- Package List:
Channel to provide early releases to layered products:
Source: openvswitch-2.7.2-1.git20170719.el7fdp.src.rpm
noarch: openvswitch-test-2.7.2-1.git20170719.el7fdp.noarch.rpm python-openvswitch-2.7.2-1.git20170719.el7fdp.noarch.rpm
x86_64: openvswitch-2.7.2-1.git20170719.el7fdp.x86_64.rpm openvswitch-debuginfo-2.7.2-1.git20170719.el7fdp.x86_64.rpm openvswitch-devel-2.7.2-1.git20170719.el7fdp.x86_64.rpm openvswitch-ovn-central-2.7.2-1.git20170719.el7fdp.x86_64.rpm openvswitch-ovn-common-2.7.2-1.git20170719.el7fdp.x86_64.rpm openvswitch-ovn-docker-2.7.2-1.git20170719.el7fdp.x86_64.rpm openvswitch-ovn-host-2.7.2-1.git20170719.el7fdp.x86_64.rpm openvswitch-ovn-vtep-2.7.2-1.git20170719.el7fdp.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/
- References:
https://access.redhat.com/security/cve/CVE-2017-9214 https://access.redhat.com/security/cve/CVE-2017-9263 https://access.redhat.com/security/cve/CVE-2017-9264 https://access.redhat.com/security/cve/CVE-2017-9265 https://access.redhat.com/security/updates/classification/#moderate
- Contact:
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/
Copyright 2017 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iD8DBQFZgxmYXlSAg2UNWIIRAuzuAJ9Dngapo5j66itwFnpsvl92GKMAywCfb2Ah V7og7GgSn4a1oFzQjIZHeXk= =qOi+ -----END PGP SIGNATURE-----
-- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201705-3789", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "openvswitch", "scope": "eq", "trust": 1.6, "vendor": "openvswitch", "version": "2.6.1" }, { "model": "open vswitch", "scope": "eq", "trust": 0.8, "vendor": "open vswitch", "version": "2.6.1" }, { "model": "rhev-m", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "4.0" }, { "model": "openstack platform", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "8.0" }, { "model": "openstack platform", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "11" }, { "model": "openstack platform", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "10" }, { "model": "enterprise linux openstack platform for rhel", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "7.07" }, { "model": "enterprise linux openstack platform for rhel", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "6.07" }, { "model": "enterprise linux openstack platform for rhel", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "5.06" }, { "model": "vswitch open vswitch", "scope": "eq", "trust": 0.3, "vendor": "open", "version": "2.7" }, { "model": "powerkvm", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "3.1" } ], "sources": [ { "db": "BID", "id": "102342" }, { "db": "JVNDB", "id": "JVNDB-2017-004542" }, { "db": "NVD", "id": "CVE-2017-9264" }, { "db": "CNNVD", "id": "CNNVD-201705-1372" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:openvswitch:openvswitch:2.6.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "NVD", "id": "CVE-2017-9264" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "The vendor reported these issues.", "sources": [ { "db": "BID", "id": "102342" } ], "trust": 0.3 }, "cve": "CVE-2017-9264", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "acInsufInfo": true, "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "NVD", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 10.0, "impactScore": 6.4, "integrityImpact": "PARTIAL", "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "trust": 1.0, "userInteractionRequired": false, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, { "acInsufInfo": null, "accessComplexity": "Low", "accessVector": "Network", "authentication": "None", "author": "NVD", "availabilityImpact": "Partial", "baseScore": 7.5, "confidentialityImpact": "Partial", "exploitabilityScore": null, "id": "CVE-2017-9264", "impactScore": null, "integrityImpact": "Partial", "obtainAllPrivilege": null, "obtainOtherPrivilege": null, "obtainUserPrivilege": null, "severity": "High", "trust": 0.8, "userInteractionRequired": null, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 10.0, "id": "VHN-117467", "impactScore": 6.4, "integrityImpact": "PARTIAL", "severity": "HIGH", "trust": 0.1, "vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:P", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "NETWORK", "author": "NVD", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "exploitabilityScore": 3.9, "impactScore": 5.9, "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "trust": 1.0, "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, { "attackComplexity": "Low", "attackVector": "Network", "author": "NVD", "availabilityImpact": "High", "baseScore": 9.8, "baseSeverity": "Critical", "confidentialityImpact": "High", "exploitabilityScore": null, "id": "CVE-2017-9264", "impactScore": null, "integrityImpact": "High", "privilegesRequired": "None", "scope": "Unchanged", "trust": 0.8, "userInteraction": "None", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" } ], "severity": [ { "author": "NVD", "id": "CVE-2017-9264", "trust": 1.8, "value": "CRITICAL" }, { "author": "CNNVD", "id": "CNNVD-201705-1372", "trust": 0.6, "value": "CRITICAL" }, { "author": "VULHUB", "id": "VHN-117467", "trust": 0.1, "value": "HIGH" } ] } ], "sources": [ { "db": "VULHUB", "id": "VHN-117467" }, { "db": "JVNDB", "id": "JVNDB-2017-004542" }, { "db": "NVD", "id": "CVE-2017-9264" }, { "db": "CNNVD", "id": "CNNVD-201705-1372" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions `extract_l3_ipv6`, `extract_l4_tcp`, and `extract_l4_udp` that can be triggered remotely. Open vSwitch (OvS) Contains a buffer error vulnerability.Information is acquired, information is acquired, information is altered, and service operation is interrupted (DoS) There is a possibility of being put into a state. Open vSwitch is prone to the following multiple security vulnerabilities:\n1. Multiple buffer-overflow vulnerabilities\n2. A denial-of-service vulnerability\nAn attacker can exploit these issues to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will likely result in denial-of-service conditions. Open vSwitch (OvS) is a multi-layer virtual switch product based on open source technology (according to the Apache2.0 license). It supports large-scale network automation, standard management interfaces and protocols, etc. through programming extensions. The \u0027extract_l3_ipv6\u0027, \u0027extract_l4_tcp\u0027 and \u0027extract_l4_udp\u0027 functions of the lib/conntrack.c file in the firewall implementation process of OvS 2.6.1 version have security vulnerabilities. ==========================================================================\nUbuntu Security Notice USN-3450-1\nOctober 11, 2017\n\nopenvswitch vulnerabilities\n==========================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 17.04\n- Ubuntu 16.04 LTS\n\nSummary:\n\nSeveral security issues were fixed in Open vSwitch. \n\nSoftware Description:\n- openvswitch: Ethernet virtual switch\n\nDetails:\n\nBhargava Shastry discovered that Open vSwitch incorrectly handled certain\nOFP messages. (CVE-2017-9214)\n\nIt was discovered that Open vSwitch incorrectly handled certain OpenFlow\nrole messages. (CVE-2017-9263)\n\nIt was discovered that Open vSwitch incorrectly handled certain malformed\npackets. This issue only\naffected Ubuntu 17.04. (CVE-2017-9265)\n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 17.04:\n openvswitch-common 2.6.1-0ubuntu5.1\n\nUbuntu 16.04 LTS:\n openvswitch-common 2.5.2-0ubuntu0.16.04.2\n\nIn general, a standard system update will make all the necessary changes. \n1473735 - ovs-vswitchd crashes with SIGSEGV randomly when adding/removing interfaces\n\n6. X-Scanned-By: MIMEDefang 2.79 on 10.5.11.11\nX-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.5.110.25]); Thu, 03 Aug 2017 12:39:24 +0000 (UTC)\n\n\n-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\n=====================================================================\n Red Hat Security Advisory\n\nSynopsis: Moderate: openvswitch security, bug fix, and enhancement update\nAdvisory ID: RHSA-2017:2418-01\nProduct: Fast Datapath\nAdvisory URL: https://access.redhat.com/errata/RHSA-2017:2418\nIssue date: 2017-08-03\nCVE Names: CVE-2017-9214 CVE-2017-9263 CVE-2017-9264 \n CVE-2017-9265 \n=====================================================================\n\n1. Summary:\n\nAn update for openvswitch is now available for Fast Datapath for Red Hat\nEnterprise Linux 7. \n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section. \n\n2. Relevant releases/architectures:\n\nChannel to provide early releases to layered products - noarch, x86_64\n\n3. Description:\n\nOpen vSwitch provides standard network bridging functions and support for\nthe OpenFlow protocol for remote per-flow control of traffic. \n\nThe following packages have been upgraded to a later upstream version:\nopenvswitch (2.7.2). (BZ#1472854)\n\nSecurity Fix(es):\n\n* An unsigned int wrap around leading to a buffer over-read was found when\nparsing OFPT_QUEUE_GET_CONFIG_REPLY messages in Open vSwitch (OvS). An\nattacker could use this flaw to cause a remote DoS. (CVE-2017-9214)\n\n* In Open vSwitch (OvS), while parsing an OpenFlow role status message\nthere is a call to the abort() function for undefined role status reasons\nin the function `ofp_print_role_status_message` in `lib/ofp-print.c` that\nmay be leveraged toward a remote DoS attack by a malicious switch. A remote attack could use this flaw to cause a\nDenial of Service (DoS). (CVE-2017-9264)\n\n* A buffer over-read flaw was found in Open vSwitch (OvS) while parsing the\ngroup mod OpenFlow messages sent from the controller. An attacker could use\nthis flaw to cause a Denial of Service (DoS). (CVE-2017-9265)\n\n4. Solution:\n\nFor details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\n5. Package List:\n\nChannel to provide early releases to layered products:\n\nSource:\nopenvswitch-2.7.2-1.git20170719.el7fdp.src.rpm\n\nnoarch:\nopenvswitch-test-2.7.2-1.git20170719.el7fdp.noarch.rpm\npython-openvswitch-2.7.2-1.git20170719.el7fdp.noarch.rpm\n\nx86_64:\nopenvswitch-2.7.2-1.git20170719.el7fdp.x86_64.rpm\nopenvswitch-debuginfo-2.7.2-1.git20170719.el7fdp.x86_64.rpm\nopenvswitch-devel-2.7.2-1.git20170719.el7fdp.x86_64.rpm\nopenvswitch-ovn-central-2.7.2-1.git20170719.el7fdp.x86_64.rpm\nopenvswitch-ovn-common-2.7.2-1.git20170719.el7fdp.x86_64.rpm\nopenvswitch-ovn-docker-2.7.2-1.git20170719.el7fdp.x86_64.rpm\nopenvswitch-ovn-host-2.7.2-1.git20170719.el7fdp.x86_64.rpm\nopenvswitch-ovn-vtep-2.7.2-1.git20170719.el7fdp.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security. Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2017-9214\nhttps://access.redhat.com/security/cve/CVE-2017-9263\nhttps://access.redhat.com/security/cve/CVE-2017-9264\nhttps://access.redhat.com/security/cve/CVE-2017-9265\nhttps://access.redhat.com/security/updates/classification/#moderate\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2017 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n\niD8DBQFZgxmYXlSAg2UNWIIRAuzuAJ9Dngapo5j66itwFnpsvl92GKMAywCfb2Ah\nV7og7GgSn4a1oFzQjIZHeXk=\n=qOi+\n-----END PGP SIGNATURE-----\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://www.redhat.com/mailman/listinfo/rhsa-announce\n", "sources": [ { "db": "NVD", "id": "CVE-2017-9264" }, { "db": "JVNDB", "id": "JVNDB-2017-004542" }, { "db": "BID", "id": "102342" }, { "db": "VULHUB", "id": "VHN-117467" }, { "db": "PACKETSTORM", "id": "144576" }, { "db": "PACKETSTORM", "id": "144137" }, { "db": "PACKETSTORM", "id": "144026" }, { "db": "PACKETSTORM", "id": "143646" } ], "trust": 2.34 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2017-9264", "trust": 3.2 }, { "db": "JVNDB", "id": "JVNDB-2017-004542", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201705-1372", "trust": 0.7 }, { "db": "BID", "id": "102342", "trust": 0.3 }, { "db": "VULHUB", "id": "VHN-117467", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "144576", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "144137", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "144026", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "143646", "trust": 0.1 } ], "sources": [ { "db": "VULHUB", "id": "VHN-117467" }, { "db": "BID", "id": "102342" }, { "db": "JVNDB", "id": "JVNDB-2017-004542" }, { "db": "PACKETSTORM", "id": "144576" }, { "db": "PACKETSTORM", "id": "144137" }, { "db": "PACKETSTORM", "id": "144026" }, { "db": "PACKETSTORM", "id": "143646" }, { "db": "NVD", "id": "CVE-2017-9264" }, { "db": "CNNVD", "id": "CNNVD-201705-1372" } ] }, "id": "VAR-201705-3789", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "VULHUB", "id": "VHN-117467" } ], "trust": 0.725 }, "last_update_date": "2023-12-18T11:37:29.597000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "[ovs-dev] [PATCH] conntrack: Fix checks for TCP, UDP, and IPv6 header sizes.", "trust": 0.8, "url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-march/329323.html" }, { "title": "Open vSwitch Security vulnerabilities", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=70638" } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2017-004542" }, { "db": "CNNVD", "id": "CNNVD-201705-1372" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-125", "trust": 1.1 }, { "problemtype": "CWE-119", "trust": 0.9 } ], "sources": [ { "db": "VULHUB", "id": "VHN-117467" }, { "db": "JVNDB", "id": "JVNDB-2017-004542" }, { "db": "NVD", "id": "CVE-2017-9264" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 1.8, "url": "https://access.redhat.com/errata/rhsa-2017:2418" }, { "trust": 1.8, "url": "https://access.redhat.com/errata/rhsa-2017:2648" }, { "trust": 1.8, "url": "https://access.redhat.com/errata/rhsa-2017:2727" }, { "trust": 1.7, "url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-march/329323.html" }, { "trust": 1.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2017-9264" }, { "trust": 0.8, "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-9264" }, { "trust": 0.6, "url": "https://access.redhat.com/security/cve/cve-2017-9263" }, { "trust": 0.6, "url": "https://access.redhat.com/security/cve/cve-2017-9264" }, { "trust": 0.6, "url": "https://access.redhat.com/security/cve/cve-2017-9265" }, { "trust": 0.4, "url": "https://nvd.nist.gov/vuln/detail/cve-2017-9265" }, { "trust": 0.4, "url": "https://nvd.nist.gov/vuln/detail/cve-2017-9214" }, { "trust": 0.4, "url": "https://nvd.nist.gov/vuln/detail/cve-2017-9263" }, { "trust": 0.3, "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457327" }, { "trust": 0.3, "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457335" }, { "trust": 0.3, "url": "http://www.ibm.com" }, { "trust": 0.3, "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457329" }, { "trust": 0.3, "url": "http://www-01.ibm.com/support/docview.wss?uid=isg3t1026032" }, { "trust": 0.3, "url": "https://www.redhat.com/mailman/listinfo/rhsa-announce" }, { "trust": 0.3, "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "trust": 0.3, "url": "https://bugzilla.redhat.com/):" }, { "trust": 0.3, "url": "https://access.redhat.com/security/team/key/" }, { "trust": 0.3, "url": "https://access.redhat.com/articles/11258" }, { "trust": 0.3, "url": "https://access.redhat.com/security/cve/cve-2017-9214" }, { "trust": 0.3, "url": "https://access.redhat.com/security/team/contact/" }, { "trust": 0.1, "url": "https://www.ubuntu.com/usn/usn-3450-1" }, { "trust": 0.1, "url": "https://launchpad.net/ubuntu/+source/openvswitch/2.6.1-0ubuntu5.1" }, { "trust": 0.1, "url": "https://launchpad.net/ubuntu/+source/openvswitch/2.5.2-0ubuntu0.16.04.2" } ], "sources": [ { "db": "VULHUB", "id": "VHN-117467" }, { "db": "BID", "id": "102342" }, { "db": "JVNDB", "id": "JVNDB-2017-004542" }, { "db": "PACKETSTORM", "id": "144576" }, { "db": "PACKETSTORM", "id": "144137" }, { "db": "PACKETSTORM", "id": "144026" }, { "db": "PACKETSTORM", "id": "143646" }, { "db": "NVD", "id": "CVE-2017-9264" }, { "db": "CNNVD", "id": "CNNVD-201705-1372" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "VULHUB", "id": "VHN-117467" }, { "db": "BID", "id": "102342" }, { "db": "JVNDB", "id": "JVNDB-2017-004542" }, { "db": "PACKETSTORM", "id": "144576" }, { "db": "PACKETSTORM", "id": "144137" }, { "db": "PACKETSTORM", "id": "144026" }, { "db": "PACKETSTORM", "id": "143646" }, { "db": "NVD", "id": "CVE-2017-9264" }, { "db": "CNNVD", "id": "CNNVD-201705-1372" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2017-05-29T00:00:00", "db": "VULHUB", "id": "VHN-117467" }, { "date": "2017-05-26T00:00:00", "db": "BID", "id": "102342" }, { "date": "2017-06-28T00:00:00", "db": "JVNDB", "id": "JVNDB-2017-004542" }, { "date": "2017-10-12T13:40:31", "db": "PACKETSTORM", "id": "144576" }, { "date": "2017-09-14T19:51:05", "db": "PACKETSTORM", "id": "144137" }, { "date": "2017-09-06T17:18:00", "db": "PACKETSTORM", "id": "144026" }, { "date": "2017-08-04T05:19:21", "db": "PACKETSTORM", "id": "143646" }, { "date": "2017-05-29T04:29:00.400000", "db": "NVD", "id": "CVE-2017-9264" }, { "date": "2017-05-31T00:00:00", "db": "CNNVD", "id": "CNNVD-201705-1372" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2019-10-03T00:00:00", "db": "VULHUB", "id": "VHN-117467" }, { "date": "2017-05-26T00:00:00", "db": "BID", "id": "102342" }, { "date": "2017-06-28T00:00:00", "db": "JVNDB", "id": "JVNDB-2017-004542" }, { "date": "2019-10-03T00:03:26.223000", "db": "NVD", "id": "CVE-2017-9264" }, { "date": "2019-10-23T00:00:00", "db": "CNNVD", "id": "CNNVD-201705-1372" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "PACKETSTORM", "id": "144576" }, { "db": "PACKETSTORM", "id": "144137" }, { "db": "PACKETSTORM", "id": "144026" }, { "db": "PACKETSTORM", "id": "143646" }, { "db": "CNNVD", "id": "CNNVD-201705-1372" } ], "trust": 1.0 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Open vSwitch Buffer error vulnerability", "sources": [ { "db": "JVNDB", "id": "JVNDB-2017-004542" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "buffer error", "sources": [ { "db": "CNNVD", "id": "CNNVD-201705-1372" } ], "trust": 0.6 } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.