In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in lib/flow.c
in the function miniflow_extract
, permitting remote bypass of the access control list enforced by the switch.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "openvswitch-common", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "openvswitch-common-dbgsym", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "openvswitch-dbg", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "openvswitch-ipsec", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "openvswitch-ipsec-dbgsym", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "openvswitch-pki", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "openvswitch-switch", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "openvswitch-switch-dbgsym", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "openvswitch-switch-dpdk", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "openvswitch-switch-dpdk-dbgsym", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "openvswitch-test", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "openvswitch-testcontroller", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "openvswitch-testcontroller-dbgsym", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "openvswitch-vtep", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "openvswitch-vtep-dbgsym", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "ovn-central", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "ovn-central-dbgsym", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "ovn-common", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "ovn-common-dbgsym", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "ovn-docker", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "ovn-docker-dbgsym", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "ovn-host", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "ovn-host-dbgsym", "binary_version": "2.5.2-0ubuntu0.16.04.1" }, { "binary_name": "python-openvswitch", "binary_version": "2.5.2-0ubuntu0.16.04.1" } ] }