CVE-2017-9214
Fixed in a distro release EPSS 3%
In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.
Products: openvswitch, debian_linux, redhat openstack, redhat virtualization, redhat virtualization_manager
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openvswitch | 2.8.1+dfsg1-2 |
| Debian 13 | openvswitch | 2.8.1+dfsg1-2 |
| Debian 14 | openvswitch | 2.8.1+dfsg1-2 |
| Debian 9 | openvswitch | 2.6.10-0+deb9u1 |
| Red Hat Enterprise Linux 7 | openvswitch | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-debuginfo | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-devel | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-central | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-common | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-docker | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-host | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-vtep | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-test | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | python-openvswitch | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat openstack 10 | openvswitch | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 10 | openvswitch-debuginfo | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 10 | python-openvswitch | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | openvswitch | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | openvswitch-debuginfo | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | openvswitch-ovn-central | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | openvswitch-ovn-common | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | openvswitch-ovn-docker | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | openvswitch-ovn-host | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | openvswitch-ovn-vtep | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | python-openvswitch | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 6 | openvswitch | 0:2.4.1-2.git20160727.el7ost |
| Red Hat openstack 6 | openvswitch-debuginfo | 0:2.4.1-2.git20160727.el7ost |
| Red Hat openstack 6 | python-openvswitch | 0:2.4.1-2.git20160727.el7ost |
| Red Hat openstack 7 | openvswitch | 0:2.5.0-15.git20160727.el7ost |
| Red Hat openstack 7 | openvswitch-debuginfo | 0:2.5.0-15.git20160727.el7ost |
| Red Hat openstack 7 | python-openvswitch | 0:2.5.0-15.git20160727.el7ost |
| Red Hat openstack 8 | openvswitch | 0:2.5.0-15.git20160727.el7ost |
| Red Hat openstack 8 | openvswitch-debuginfo | 0:2.5.0-15.git20160727.el7ost |
| Red Hat openstack 8 | python-openvswitch | 0:2.5.0-15.git20160727.el7ost |
| Red Hat openstack 9 | openvswitch | 0:2.5.0-15.git20160727.el7ost |
| Red Hat openstack 9 | openvswitch-debuginfo | 0:2.5.0-15.git20160727.el7ost |
| Red Hat openstack 9 | python-openvswitch | 0:2.5.0-15.git20160727.el7ost |
| SUSE Linux Enterprise Server 12 SP2 | openvswitch | 2.5.1-25.12.7 |
| SUSE Linux Enterprise Server 12 SP2 | openvswitch-dpdk | 2.5.1-25.12.8 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | openvswitch | 2.5.1-25.12.7 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | openvswitch | 2.5.1-25.12.7 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | openvswitch-dpdk | 2.5.1-25.12.8 |
| SUSE OpenStack Cloud 6 | openvswitch | 2.5.1-6.4.7 |
| Ubuntu 16.04 LTS | openvswitch | 2.5.2-0ubuntu0.16.04.2 |