Lucene search

GoogleOSV:CVE-2017-9263

HistoryMay 29, 2017 - 4:29 a.m.

CVE-2017-9263

2017-05-2904:29:00

Google

osv.dev

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.1%

JSON

In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function ofp_print_role_status_message in lib/ofp-print.c that may be leveraged toward a remote DoS attack by a malicious switch.

CPENameOperatorVersion
ovseq0.99.1
ovseq0.90.1
ovseq1.1.0pre1
ovseq2.7.0
ovseq0.90.7
ovseq1.0.0
ovseq0.90.2
ovseq0.90.3
ovseq0.90.4
ovseq0.99.0

Name	Operator	Version
ovs	eq	0.99.1
ovs	eq	0.90.1
ovs	eq	1.1.0pre1
ovs	eq	2.7.0
ovs	eq	0.90.7
ovs	eq	1.0.0
ovs	eq	0.90.2
ovs	eq	0.90.3
ovs	eq	0.90.4
ovs	eq	0.99.0

Rows per page:

1-10 of 151

References

access.redhat.com/errata/RHSA-2017:2418

access.redhat.com/errata/RHSA-2017:2553

access.redhat.com/errata/RHSA-2017:2648

access.redhat.com/errata/RHSA-2017:2665

access.redhat.com/errata/RHSA-2017:2692

access.redhat.com/errata/RHSA-2017:2698

access.redhat.com/errata/RHSA-2017:2727

mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html