CVE-2017-9214 In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function ofputil_pull...
CriticalCVSS 9.8
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function ofputil_pull_queue_get_config_reply10 in lib/ofp-util.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/openvswitch(Debian:12) | < 2.8.1+dfsg1-2 | 2.8.1+dfsg1-2 |
| debian/openvswitch(Debian:13) | < 2.8.1+dfsg1-2 | 2.8.1+dfsg1-2 |
| debian/openvswitch(Debian:14) | < 2.8.1+dfsg1-2 | 2.8.1+dfsg1-2 |
| openvswitch | = 2.7.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| redhat openstack | = 6.0 | No fix listed |
| redhat openstack | = 7.0 | No fix listed |
| redhat openstack | = 8 | No fix listed |
| redhat openstack | = 9 | No fix listed |
| redhat openstack | = 10 | No fix listed |
| redhat openstack | = 11 | No fix listed |
| redhat virtualization | = 4.1 | No fix listed |
| redhat virtualization | = 4.0 | No fix listed |
| redhat virtualization manager | = 4.1 | No fix listed |
References
- Debian Security Tracker CVE-2017-9214 vendor-advisory
- RHSA-2017:2418 third-party-advisory vendor-advisory
- RHSA-2017:2553 third-party-advisory vendor-advisory
- RHSA-2017:2648 third-party-advisory vendor-advisory
- RHSA-2017:2665 third-party-advisory vendor-advisory
- RHSA-2017:2692 third-party-advisory vendor-advisory
- RHSA-2017:2698 third-party-advisory vendor-advisory
- RHSA-2017:2727 third-party-advisory vendor-advisory
- [debian-lts-announce] 20210219 [SECURITY] [DLA 2571-1] openvswitch security update mailing-list third-party-advisory
- mail.openvswitch.org mailing-list patch vendor-advisory
- bugs.debian.org issue-tracking