CVE-2017-9265
Fixed in a distro release EPSS 3%
In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` in the function `ofputil_pull_ofp15_group_mod`.
Products: openvswitch
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openvswitch | 2.8.1+dfsg1-2 |
| Debian 13 | openvswitch | 2.8.1+dfsg1-2 |
| Debian 14 | openvswitch | 2.8.1+dfsg1-2 |
| Red Hat Enterprise Linux 7 | openvswitch | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-debuginfo | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-devel | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-central | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-common | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-docker | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-host | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-vtep | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-test | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat Enterprise Linux 7 | python-openvswitch | 0:2.7.2-1.git20170719.el7fdp |
| Red Hat openstack 10 | openvswitch | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 10 | openvswitch-debuginfo | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 10 | python-openvswitch | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | openvswitch | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | openvswitch-debuginfo | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | openvswitch-ovn-central | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | openvswitch-ovn-common | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | openvswitch-ovn-docker | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | openvswitch-ovn-host | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | openvswitch-ovn-vtep | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 11 | python-openvswitch | 0:2.6.1-13.git20161206.el7ost |
| Red Hat openstack 6 | openvswitch | 0:2.4.1-2.git20160727.el7ost |
| Red Hat openstack 6 | openvswitch-debuginfo | 0:2.4.1-2.git20160727.el7ost |
| Red Hat openstack 6 | python-openvswitch | 0:2.4.1-2.git20160727.el7ost |
| Red Hat openstack 7 | openvswitch | 0:2.5.0-15.git20160727.el7ost |
| Red Hat openstack 7 | openvswitch-debuginfo | 0:2.5.0-15.git20160727.el7ost |
| Red Hat openstack 7 | python-openvswitch | 0:2.5.0-15.git20160727.el7ost |
| Red Hat openstack 8 | openvswitch | 0:2.5.0-15.git20160727.el7ost |
| Red Hat openstack 8 | openvswitch-debuginfo | 0:2.5.0-15.git20160727.el7ost |
| Red Hat openstack 8 | python-openvswitch | 0:2.5.0-15.git20160727.el7ost |
| Red Hat openstack 9 | openvswitch | 0:2.5.0-15.git20160727.el7ost |
| Red Hat openstack 9 | openvswitch-debuginfo | 0:2.5.0-15.git20160727.el7ost |
| Red Hat openstack 9 | python-openvswitch | 0:2.5.0-15.git20160727.el7ost |
| SUSE Linux Enterprise Server 12 SP2 | openvswitch | 2.5.1-25.12.7 |
| SUSE Linux Enterprise Server 12 SP2 | openvswitch-dpdk | 2.5.1-25.12.8 |
| SUSE Linux Enterprise Server 12 SP3 | openvswitch | 2.7.0-3.3.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | openvswitch | 2.5.1-25.12.7 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | openvswitch | 2.5.1-25.12.7 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | openvswitch-dpdk | 2.5.1-25.12.8 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | openvswitch | 2.7.0-3.3.1 |
| SUSE OpenStack Cloud 6 | openvswitch | 2.5.1-6.4.7 |
| Ubuntu 16.04 LTS | openvswitch | 2.5.2-0ubuntu0.16.04.2 |