[SECURITY] [DSA 5387-1] openvswitch security update

2023-04-1318:45:16

lists.debian.org

openvswitch

update

vulnerability

debian

denial of service

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

8.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.9%

JSON

Debian Security Advisory DSA-5387-1 [email protected]
https://www.debian.org/security/ Moritz Muehlenhoff
April 13, 2023 https://www.debian.org/security/faq

Package : openvswitch
CVE ID : CVE-2023-1668
Debian Bug : 1034042

David Marchard discovered that Open vSwitch, a software-based Ethernet
virtual switch, is suspectible to denial of service via malformed IP
packets.

For the stable distribution (bullseye), this problem has been fixed in
version 2.15.0+ds1-2+deb11u4.

We recommend that you upgrade your openvswitch packages.

For the detailed security status of openvswitch please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/openvswitch

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian11arm64openvswitch-dev< 2.15.0+ds1-2+deb11u4openvswitch-dev_2.15.0+ds1-2+deb11u4_arm64.deb
Debian11i386openvswitch-vtep< 2.15.0+ds1-2+deb11u4openvswitch-vtep_2.15.0+ds1-2+deb11u4_i386.deb
Debian11amd64openvswitch-switch< 2.15.0+ds1-2+deb11u4openvswitch-switch_2.15.0+ds1-2+deb11u4_amd64.deb
Debian11arm64openvswitch-testcontroller< 2.15.0+ds1-2+deb11u4openvswitch-testcontroller_2.15.0+ds1-2+deb11u4_arm64.deb
Debian10armhfopenvswitch-switch< 2.10.7+ds1-0+deb10u4openvswitch-switch_2.10.7+ds1-0+deb10u4_armhf.deb
Debian11mipselopenvswitch-common< 2.15.0+ds1-2+deb11u4openvswitch-common_2.15.0+ds1-2+deb11u4_mipsel.deb
Debian10amd64ovn-controller-vtep< 2.10.7+ds1-0+deb10u4ovn-controller-vtep_2.10.7+ds1-0+deb10u4_amd64.deb
Debian10arm64openvswitch-vtep< 2.10.7+ds1-0+deb10u4openvswitch-vtep_2.10.7+ds1-0+deb10u4_arm64.deb
Debian11allopenvswitch-pki< 2.15.0+ds1-2+deb11u4openvswitch-pki_2.15.0+ds1-2+deb11u4_all.deb
Debian10amd64openvswitch-vtep< 2.10.7+ds1-0+deb10u4openvswitch-vtep_2.10.7+ds1-0+deb10u4_amd64.deb

OS	Version	Architecture	Package	Version	Filename
Debian	11	arm64	openvswitch-dev	< 2.15.0+ds1-2+deb11u4	openvswitch-dev_2.15.0+ds1-2+deb11u4_arm64.deb
Debian	11	i386	openvswitch-vtep	< 2.15.0+ds1-2+deb11u4	openvswitch-vtep_2.15.0+ds1-2+deb11u4_i386.deb
Debian	11	amd64	openvswitch-switch	< 2.15.0+ds1-2+deb11u4	openvswitch-switch_2.15.0+ds1-2+deb11u4_amd64.deb
Debian	11	arm64	openvswitch-testcontroller	< 2.15.0+ds1-2+deb11u4	openvswitch-testcontroller_2.15.0+ds1-2+deb11u4_arm64.deb
Debian	10	armhf	openvswitch-switch	< 2.10.7+ds1-0+deb10u4	openvswitch-switch_2.10.7+ds1-0+deb10u4_armhf.deb
Debian	11	mipsel	openvswitch-common	< 2.15.0+ds1-2+deb11u4	openvswitch-common_2.15.0+ds1-2+deb11u4_mipsel.deb
Debian	10	amd64	ovn-controller-vtep	< 2.10.7+ds1-0+deb10u4	ovn-controller-vtep_2.10.7+ds1-0+deb10u4_amd64.deb
Debian	10	arm64	openvswitch-vtep	< 2.10.7+ds1-0+deb10u4	openvswitch-vtep_2.10.7+ds1-0+deb10u4_arm64.deb
Debian	11	all	openvswitch-pki	< 2.15.0+ds1-2+deb11u4	openvswitch-pki_2.15.0+ds1-2+deb11u4_all.deb
Debian	10	amd64	openvswitch-vtep	< 2.10.7+ds1-0+deb10u4	openvswitch-vtep_2.10.7+ds1-0+deb10u4_amd64.deb