CVE-2017-9264
Fixed in a distro release EPSS 2%
In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions `extract_l3_ipv6`, `extract_l4_tcp`, and `extract_l4_udp` that can be triggered remotely.
Products: openvswitch
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openvswitch | 2.8.1+dfsg1-2 |
| Debian 13 | openvswitch | 2.8.1+dfsg1-2 |
| Debian 14 | openvswitch | 2.8.1+dfsg1-2 |
| Red Hat Enterprise Linux 7 | openvswitch | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-debuginfo | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-devel | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-central | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-common | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-docker | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-host | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-vtep | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-test | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | python-openvswitch | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat openstack 10 | openvswitch | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 10 | openvswitch-debuginfo | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 10 | python-openvswitch | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | openvswitch | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | openvswitch-debuginfo | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | openvswitch-ovn-central | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | openvswitch-ovn-common | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | openvswitch-ovn-docker | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | openvswitch-ovn-host | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | openvswitch-ovn-vtep | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | python-openvswitch | 0:2.6.1-13.git20161206.el7ost |
| Ubuntu 16.04 LTS | openvswitch | 2.5.2-0ubuntu0.16.04.2 |