CVE-2018-17206
Fixed in a distro release EPSS 2%
An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6. The decode_bundle function inside lib/ofp-actions.c is affected by a buffer over-read issue during BUNDLE action decoding.
Products: openvswitch, redhat openstack, canonical ubuntu_linux, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openvswitch | 2.10.0+2018.08.28+git.8ca7c82b7d+ds1-1 |
| Debian 13 | openvswitch | 2.10.0+2018.08.28+git.8ca7c82b7d+ds1-1 |
| Debian 14 | openvswitch | 2.10.0+2018.08.28+git.8ca7c82b7d+ds1-1 |
| Debian 9 | openvswitch | 2.6.10-0+deb9u1 |
| Red Hat Enterprise Linux 7 | openvswitch | 0:2.9.0-70.el7fdp.1 |
| Red Hat Enterprise Linux 7 | openvswitch-debuginfo | 0:2.9.0-70.el7fdp.1 |
| Red Hat Enterprise Linux 7 | openvswitch-devel | 0:2.9.0-70.el7fdp.1 |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-central | 0:2.9.0-70.el7fdp.1 |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-common | 0:2.9.0-70.el7fdp.1 |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-host | 0:2.9.0-70.el7fdp.1 |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-vtep | 0:2.9.0-70.el7fdp.1 |
| Red Hat Enterprise Linux 7 | openvswitch-test | 0:2.9.0-70.el7fdp.1 |
| Red Hat Enterprise Linux 7 | python-openvswitch | 0:2.9.0-70.el7fdp.1 |
| Red Hat openstack 10 | openvswitch | 0:2.9.0-83.el7fdp.1 |
| Red Hat openstack 10 | openvswitch-debuginfo | 0:2.9.0-83.el7fdp.1 |
| Red Hat openstack 10 | openvswitch-devel | 0:2.9.0-83.el7fdp.1 |
| Red Hat openstack 10 | openvswitch-ovn-central | 0:2.9.0-83.el7fdp.1 |
| Red Hat openstack 10 | openvswitch-ovn-common | 0:2.9.0-83.el7fdp.1 |
| Red Hat openstack 10 | openvswitch-ovn-host | 0:2.9.0-83.el7fdp.1 |
| Red Hat openstack 10 | openvswitch-ovn-vtep | 0:2.9.0-83.el7fdp.1 |
| Red Hat openstack 10 | openvswitch-test | 0:2.9.0-83.el7fdp.1 |
| Red Hat openstack 10 | python-openvswitch | 0:2.9.0-83.el7fdp.1 |
| Red Hat openstack 13 | openvswitch | 0:2.9.0-83.el7fdp.1 |
| Red Hat openstack 13 | openvswitch-debuginfo | 0:2.9.0-83.el7fdp.1 |
| Red Hat openstack 13 | openvswitch-ovn-central | 0:2.9.0-83.el7fdp.1 |
| Red Hat openstack 13 | openvswitch-ovn-common | 0:2.9.0-83.el7fdp.1 |
| Red Hat openstack 13 | openvswitch-ovn-host | 0:2.9.0-83.el7fdp.1 |
| Red Hat openstack 13 | openvswitch-ovn-vtep | 0:2.9.0-83.el7fdp.1 |
| Red Hat openstack 13 | openvswitch-test | 0:2.9.0-83.el7fdp.1 |
| Red Hat openstack 13 | python-openvswitch | 0:2.9.0-83.el7fdp.1 |
| SUSE Linux Enterprise Server 12 SP3 | openvswitch | 2.7.6-3.23.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | openvswitch | 2.7.6-3.23.1 |
| Ubuntu 16.04 LTS | openvswitch | 2.5.5-0ubuntu0.16.04.2 |
| Ubuntu 18.04 LTS | openvswitch | 2.9.2-0ubuntu0.18.04.3 |