critical9.8
CVE-2022-4337
An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.
Impact
An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openvswitch | Openvswitch | before 2.13.10 from 2.14.0 before 2.14.8 from 2.15.0 before 2.15.7 from 2.16.0 before 2.16.6 from 2.17.0 before 2.17.5 from 3.0.0 before 3.0.3 |
| Debian | Debian Linux | Version 11.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/openvswitch/ovs/pull/405
- https://mail.openvswitch.org/pipermail/ovs-dev/2022-December/400596.html
- https://security.gentoo.org/glsa/202311-16
- https://www.debian.org/security/2023/dsa-5319
- https://www.openwall.com/lists/oss-security/2022/12/21/4
- https://github.com/openvswitch/ovs/pull/405
- https://mail.openvswitch.org/pipermail/ovs-dev/2022-December/400596.html
- https://security.gentoo.org/glsa/202311-16
- https://www.debian.org/security/2023/dsa-5319
- https://www.openwall.com/lists/oss-security/2022/12/21/4