critical9.8
CVE-2022-4338
An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.
Impact
An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openvswitch | Openvswitch | before 2.13.10 from 2.14.0 before 2.14.8 from 2.15.0 before 2.15.7 from 2.16.0 before 2.16.6 from 2.17.0 before 2.17.5 from 3.0.0 before 3.0.3 |
| Debian | Debian Linux | Version 11.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/openvswitch/ovs/pull/405
- https://mail.openvswitch.org/pipermail/ovs-dev/2022-December/400596.html
- https://security.gentoo.org/glsa/202311-16
- https://www.debian.org/security/2023/dsa-5319
- https://www.openwall.com/lists/oss-security/2022/12/21/4
- https://github.com/openvswitch/ovs/pull/405
- https://mail.openvswitch.org/pipermail/ovs-dev/2022-December/400596.html
- https://security.gentoo.org/glsa/202311-16
- https://www.debian.org/security/2023/dsa-5319
- https://www.openwall.com/lists/oss-security/2022/12/21/4