CVE-2017-9264 In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions extract_l3_ipv6, extract_...
CriticalCVSS 9.8
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions extract_l3_ipv6, extract_l4_tcp, and extract_l4_udp that can be triggered remotely.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/openvswitch(Debian:12) | < 2.8.1+dfsg1-2 | 2.8.1+dfsg1-2 |
| debian/openvswitch(Debian:13) | < 2.8.1+dfsg1-2 | 2.8.1+dfsg1-2 |
| debian/openvswitch(Debian:14) | < 2.8.1+dfsg1-2 | 2.8.1+dfsg1-2 |
| openvswitch | = 2.6.1 | No fix listed |
References
- Debian Security Tracker CVE-2017-9264 vendor-advisory
- RHSA-2017:2418 vendor-advisory
- RHSA-2017:2648 vendor-advisory
- RHSA-2017:2727 vendor-advisory
- mail.openvswitch.org mailing-list patch vendor-advisory
- bugs.debian.org issue-tracking