CVE-2016-2074
Fixed in a distro release EPSS 6%
Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted MPLS packets, as demonstrated by a long string in an ovs-appctl command.
Products: openvswitch, redhat openshift
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openvswitch | 2.3.0+git20140819-4 |
| Debian 13 | openvswitch | 2.3.0+git20140819-4 |
| Debian 14 | openvswitch | 2.3.0+git20140819-4 |
| Debian 8 | openvswitch | 2.3.0+git20140819-3+deb8u1 |
| Red Hat openshift 3.1 | openvswitch | 0:2.4.0-2.el7_2 |
| Red Hat openshift 3.1 | openvswitch-debuginfo | 0:2.4.0-2.el7_2 |
| Red Hat openshift 3.1 | openvswitch-devel | 0:2.4.0-2.el7_2 |
| Red Hat openshift 3.1 | openvswitch-test | 0:2.4.0-2.el7_2 |
| Red Hat openshift 3.1 | python-openvswitch | 0:2.4.0-2.el7_2 |
| Red Hat openstack 5 | openvswitch | 0:2.4.0-2.el7_2 |
| Red Hat openstack 5 | openvswitch-debuginfo | 0:2.4.0-2.el7_2 |
| Red Hat openstack 5 | python-openvswitch | 0:2.4.0-2.el7_2 |
| Red Hat openstack 6 | openvswitch | 0:2.4.0-2.el7_2 |
| Red Hat openstack 6 | openvswitch-debuginfo | 0:2.4.0-2.el7_2 |
| Red Hat openstack 6 | python-openvswitch | 0:2.4.0-2.el7_2 |
| Red Hat openstack 7 | openvswitch | 0:2.4.0-2.el7_2 |
| Red Hat openstack 7 | openvswitch-debuginfo | 0:2.4.0-2.el7_2 |
| Red Hat openstack 7 | openvswitch-dpdk | 0:2.4.0-0.10346.git97bab959.3.el7_2 |
| Red Hat openstack 7 | openvswitch-dpdk-debuginfo | 0:2.4.0-0.10346.git97bab959.3.el7_2 |
| Red Hat openstack 7 | python-openvswitch | 0:2.4.0-2.el7_2 |