Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-22563

Fixed in a distro release EPSS <1%CVSS 7.5

openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in openvswitch-2.17.8/lib/util.c.

Published 2024-01-19 · CVE record · OSV

Products: openvswitch

Distro releases

ReleasePackageFixed in
Debian 12openvswitch2.17.2-4
Debian 13openvswitch2.17.2-4
Debian 14openvswitch2.17.2-4
SUSE Enterprise Storage 7.1openvswitch2.14.2-150300.19.17.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSopenvswitch2.13.2-150200.9.31.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSopenvswitch2.14.2-150300.19.17.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSopenvswitch2.14.2-150400.24.20.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSopenvswitch2.14.2-150400.24.20.1
SUSE Linux Enterprise Module for Legacy 15 SP5openvswitch2.14.2-150400.24.20.1
SUSE Linux Enterprise Module for Package Hub 15 SP5openvswitch2.11.5-150100.3.24.1
SUSE Linux Enterprise Module for Package Hub 15 SP5openvswitch2.14.2-150400.24.20.1
SUSE Linux Enterprise Server 12 SP5openvswitch2.11.5-3.21.1
SUSE Linux Enterprise Server 15 SP2-LTSSopenvswitch2.13.2-150200.9.31.1
SUSE Linux Enterprise Server 15 SP3-LTSSopenvswitch2.14.2-150300.19.17.1
SUSE Linux Enterprise Server 15 SP4-LTSSopenvswitch2.14.2-150400.24.20.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5openvswitch2.11.5-3.21.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2openvswitch2.13.2-150200.9.31.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3openvswitch2.14.2-150300.19.17.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4openvswitch2.14.2-150400.24.20.1
SUSE Manager Proxy 4.3openvswitch2.14.2-150400.24.20.1
SUSE Manager Server 4.3openvswitch2.14.2-150400.24.20.1
Ubuntu 20.04 LTSopenvswitch2.13.8-0ubuntu1.1
openSUSE Leap 15.5openvswitch2.14.2-150400.24.20.1