CVE Browser

Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet

openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in openvswitch-2.17.8/lib/util.c.

Openvswitch don't match packets on nd_target field

openvswitch: Integer Underflow in Organization Specific TLV

openvswitch: Out-of-Bounds Read in Organization Specific TLV

openvswitch: DoS via crafted packet

dpdk: sending vhost-user-inflight type messages could lead to DoS

openvswitch: External triggered memory leak in Open vSwitch while processing fragmented packets

openvswitch: use-after-free in decode_NXAST_RAW_ENCAP during the decoding of a RAW_ENCAP action

lldp/openvswitch: denial of service via externally triggered memory leak

openvswitch: limitation in the OVS packet parsing in userspace leads to DoS

openvswitch: Buffer over-read in lib/ofp-actions.c:decode_bundle()

openvswitch: Error during bundle commit in ofproto/ofproto.c:ofproto_rule_insert__() allows for crash

openvswitch: Mishandle of group mods in lib/ofp-util.c:parse_group_prop_ntr_selection_method() allows for assertion failure

openvswitch: Multiple memory leaks in lib/ofp-util.c while parsing malformed OpenFlow group mod messages

openvswitch: Buffer over-read while parsing the group mod OpenFlow message

openvswitch: Buffer over-read while parsing malformed TCP, UDP and IPv6 packets

openvswitch: Invalid processing of a malicious OpenFlow role status message

openvswitch: Unsigned integer overflow in the miniflow_extract function

openvswitch: Integer underflow in the ofputil_pull_queue_get_config_reply10 function

openvswitch: MPLS buffer overflow vulnerability

Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/,…