Cloudbase Open vSwitch 2.1.0

CPE Details

Cloudbase Open vSwitch 2.1.0
cloudbase
open_vswitch
2.1.0
2023-01-24
19h03 +00:00
2023-01-24
19h33 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:cloudbase:open_vswitch:2.1.0:*:*:*:*:*:*:*

Informations

Vendor

cloudbase

Product

open_vswitch

Version

2.1.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-1668 2023-04-09 22h00 +00:00 A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.
8.2
High
CVE-2022-32166 2022-09-28 09h30 +00:00 In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.