rhsa-2018_3500
Vulnerability from csaf_redhat
Published
2018-11-05 14:56
Modified
2024-11-15 00:37
Summary
Red Hat Security Advisory: openvswitch security, bug fix, and enhancement update
Notes
Topic
An update for openvswitch is now available for Fast Datapath for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.
Security Fix(es):
* openvswitch: Mishandle of group mods in lib/ofp-util.c:parse_group_prop_ntr_selection_method() allows for assertion failure (CVE-2018-17204)
* openvswitch: Error during bundle commit in ofproto/ofproto.c:ofproto_rule_insert__() allows for crash (CVE-2018-17205)
* openvswitch: Buffer over-read in lib/ofp-actions.c:decode_bundle() (CVE-2018-17206)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Previously, when the ovs-vswitchd service restarted, an error displayed with many open files. With this update, the number of sockets opened by ovs-vswitchd is decreased. As a result, the described problem no longer occurs. (BZ#1526306)
* Previously, when OpenvSwitch service was reloaded, the default flow was not removed and it became part of the final flow table. With this update, the default flow rule is no longer added after a service reload. As a result, the described problem no longer occurs. (BZ#1626096)
Enhancement(s):
* With this update, the pmd-rxq-assign configuration has been added to Poll Mode Drivers (PMDs) cores. This allows users to select a round-robin assignment. (BZ#1616001)
* With this update the ovs-appctl connection-status command has been introduced to the ovs-appctl utility. The command enables to monitor hypervisor (HV) south bound database (SBDB) connection status. Layered products can now check if the ovn-controller is properly connected to a central node. (BZ#1593804)
* With this update, a support for the Dynamic Host Configuration Protocol (DHCP) option 252 has been added to Open Virtual Network (OVN) Native DHCP. (BZ#1641765)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for openvswitch is now available for Fast Datapath for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.\n\nSecurity Fix(es):\n\n* openvswitch: Mishandle of group mods in lib/ofp-util.c:parse_group_prop_ntr_selection_method() allows for assertion failure (CVE-2018-17204)\n\n* openvswitch: Error during bundle commit in ofproto/ofproto.c:ofproto_rule_insert__() allows for crash (CVE-2018-17205)\n\n* openvswitch: Buffer over-read in lib/ofp-actions.c:decode_bundle() (CVE-2018-17206)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Previously, when the ovs-vswitchd service restarted, an error displayed with many open files. With this update, the number of sockets opened by ovs-vswitchd is decreased. As a result, the described problem no longer occurs. (BZ#1526306)\n\n* Previously, when OpenvSwitch service was reloaded, the default flow was not removed and it became part of the final flow table. With this update, the default flow rule is no longer added after a service reload. As a result, the described problem no longer occurs. (BZ#1626096)\n\nEnhancement(s):\n\n* With this update, the pmd-rxq-assign configuration has been added to Poll Mode Drivers (PMDs) cores. This allows users to select a round-robin assignment. (BZ#1616001)\n\n* With this update the ovs-appctl connection-status command has been introduced to the ovs-appctl utility. The command enables to monitor hypervisor (HV) south bound database (SBDB) connection status. Layered products can now check if the ovn-controller is properly connected to a central node. (BZ#1593804)\n\n* With this update, a support for the Dynamic Host Configuration Protocol (DHCP) option 252 has been added to Open Virtual Network (OVN) Native DHCP. (BZ#1641765)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:3500",
"url": "https://access.redhat.com/errata/RHSA-2018:3500"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1526306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1526306"
},
{
"category": "external",
"summary": "1580217",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1580217"
},
{
"category": "external",
"summary": "1593804",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1593804"
},
{
"category": "external",
"summary": "1609643",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1609643"
},
{
"category": "external",
"summary": "1616001",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1616001"
},
{
"category": "external",
"summary": "1618488",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618488"
},
{
"category": "external",
"summary": "1626096",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1626096"
},
{
"category": "external",
"summary": "1627711",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1627711"
},
{
"category": "external",
"summary": "1632522",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1632522"
},
{
"category": "external",
"summary": "1632525",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1632525"
},
{
"category": "external",
"summary": "1632528",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1632528"
},
{
"category": "external",
"summary": "1641765",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1641765"
},
{
"category": "external",
"summary": "1643527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1643527"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3500.json"
}
],
"title": "Red Hat Security Advisory: openvswitch security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2024-11-15T00:37:10+00:00",
"generator": {
"date": "2024-11-15T00:37:10+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:3500",
"initial_release_date": "2018-11-05T14:56:37+00:00",
"revision_history": [
{
"date": "2018-11-05T14:56:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-11-05T14:56:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-15T00:37:10+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Fast Datapath for Red Hat Enterprise Linux 7",
"product": {
"name": "Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
}
}
},
{
"category": "product_name",
"name": "Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product": {
"name": "Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::hypervisor"
}
}
}
],
"category": "product_family",
"name": "Fast Datapath"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"product_id": "openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch@2.9.0-70.el7fdp.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"product_id": "openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch-devel@2.9.0-70.el7fdp.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch-ovn-central@2.9.0-70.el7fdp.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch-ovn-common@2.9.0-70.el7fdp.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"product_id": "openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch-debuginfo@2.9.0-70.el7fdp.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"product": {
"name": "python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"product_id": "python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-openvswitch@2.9.0-70.el7fdp.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch-ovn-vtep@2.9.0-70.el7fdp.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch-ovn-host@2.9.0-70.el7fdp.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-70.el7fdp.1.src",
"product": {
"name": "openvswitch-0:2.9.0-70.el7fdp.1.src",
"product_id": "openvswitch-0:2.9.0-70.el7fdp.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch@2.9.0-70.el7fdp.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"product_id": "openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch@2.9.0-70.el7fdp.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"product_id": "openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch-devel@2.9.0-70.el7fdp.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"product_id": "openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch-ovn-central@2.9.0-70.el7fdp.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"product_id": "openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch-ovn-common@2.9.0-70.el7fdp.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"product_id": "openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch-debuginfo@2.9.0-70.el7fdp.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"product": {
"name": "python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"product_id": "python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-openvswitch@2.9.0-70.el7fdp.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"product_id": "openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch-ovn-vtep@2.9.0-70.el7fdp.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"product_id": "openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch-ovn-host@2.9.0-70.el7fdp.1?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"product": {
"name": "openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"product_id": "openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch-test@2.9.0-70.el7fdp.1?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-70.el7fdp.1.ppc64le as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-70.el7fdp.1.src as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.src"
},
"product_reference": "openvswitch-0:2.9.0-70.el7fdp.1.src",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-70.el7fdp.1.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-test-0:2.9.0-70.el7fdp.1.noarch as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.9.0-70.el7fdp.1.noarch"
},
"product_reference": "openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le"
},
"product_reference": "python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64"
},
"product_reference": "python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-70.el7fdp.1.src as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.src"
},
"product_reference": "openvswitch-0:2.9.0-70.el7fdp.1.src",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-test-0:2.9.0-70.el7fdp.1.noarch as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-test-0:2.9.0-70.el7fdp.1.noarch"
},
"product_reference": "openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le"
},
"product_reference": "python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64"
},
"product_reference": "python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-17204",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2018-09-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1632522"
}
],
"notes": [
{
"category": "description",
"text": "An issue was discovered in Open vSwitch (OvS), 2.4.x through 2.4.1, 2.5.x through 2.5.5, 2.6.x through 2.6.3, 2.7.x through 2.7.6, 2.8.x through 2.8.4, and2.9.x through 2.9.2, affecting the parse_group_prop_ntr_selection_method in lib/ofp-util.c. On controllers with the OpenFlow 1.5 decoder enabled, a specially crafted group update can cause an assertion failure, potentially leading to a Denial of Service condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openvswitch: Mishandle of group mods in lib/ofp-util.c:parse_group_prop_ntr_selection_method() allows for assertion failure",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.src",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.src",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-17204"
},
{
"category": "external",
"summary": "RHBZ#1632522",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1632522"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-17204",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-17204"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17204",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17204"
}
],
"release_date": "2018-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-11-05T14:56:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.src",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.src",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:3500"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 2.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.src",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.src",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openvswitch: Mishandle of group mods in lib/ofp-util.c:parse_group_prop_ntr_selection_method() allows for assertion failure"
},
{
"cve": "CVE-2018-17205",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2018-09-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1632525"
}
],
"notes": [
{
"category": "description",
"text": "An issue was discovered in Open vSwitch (OvS), 2.7.x through 2.7.6, 2.8.x through 2.8.4, and 2.9.x through 2.9.2, where the ofproto_rule_insert__() function inside ofproto/ofproto.c is affected by an assertion failure under certain circumstances.\r\nA specially crafted flow update applied using the bundling feature of Open vSwitch could potentially cause the assertion failure, potentially leading to incorrect flow information being applied, or a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openvswitch: Error during bundle commit in ofproto/ofproto.c:ofproto_rule_insert__() allows for crash",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.src",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.src",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-17205"
},
{
"category": "external",
"summary": "RHBZ#1632525",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1632525"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-17205",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-17205"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17205",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17205"
}
],
"release_date": "2018-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-11-05T14:56:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.src",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.src",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:3500"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.src",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.src",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openvswitch: Error during bundle commit in ofproto/ofproto.c:ofproto_rule_insert__() allows for crash"
},
{
"cve": "CVE-2018-17206",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2018-09-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1632528"
}
],
"notes": [
{
"category": "description",
"text": "An issue was discovered in Open vSwitch (OvS) 2.5.x through 2.5.5, 2.6.x through 2.6.3, 2.7.x through 2.7.6, 2.8.x through 2.8.4, and 2.9.x through 2.9.2 where the decode_bundle function inside lib/ofp-actions.c is affected by a buffer over-read issue during BUNDLE action decoding.\r\nA specially crafted flow update applied using the bundling feature of Open vSwitch could potentially cause a crash leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openvswitch: Buffer over-read in lib/ofp-actions.c:decode_bundle()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.src",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.src",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-17206"
},
{
"category": "external",
"summary": "RHBZ#1632528",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1632528"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-17206",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-17206"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17206",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17206"
}
],
"release_date": "2018-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-11-05T14:56:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.src",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.src",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:3500"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.src",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.src",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-70.el7fdp.1.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-test-0:2.9.0-70.el7fdp.1.noarch",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-70.el7fdp.1.ppc64le",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-70.el7fdp.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openvswitch: Buffer over-read in lib/ofp-actions.c:decode_bundle()"
}
]
}
Loading...
Loading...
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.