ovs is vulnerable to denial of service (DoS) attacks. The library has a default case in the ofp_print_role_status_message()
function in lib/ofp-print.c
that calls the abort()
function. This can allow a malicious user to cause the application to abort by passing an unknown role status message.