ROS-20230117-02

A vulnerability in the Open vSwitch software tiered switch is related to loss of integer significance when parsing Auto Attach TLVs.
integer when parsing Auto Attach TLVs. Exploitation of the vulnerability could allow an attacker acting remotely to send specially crafted LLDP messages.
remotely, send specially crafted LLDP messages to a vulnerable system, trigger an integer
loss of significance and execute arbitrary code on the target system

The Open vSwitch software tiered switch vulnerability is related to boundary conditions in the
Auto Attach TLV parsing. Exploitation of the vulnerability could allow an attacker acting remotely,
send specially crafted LLDP messages to a vulnerable system, cause a read error outside of the
boundaries, and read the contents of memory on the system to perform a denial of service (DoS) attack