Vulnerability Details CVE-2017-9214
In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.059
EPSS Ranking 90.1%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- https://access.redhat.com/errata/RHSA-2017:2418
- https://access.redhat.com/errata/RHSA-2017:2553
- https://access.redhat.com/errata/RHSA-2017:2648
- https://access.redhat.com/errata/RHSA-2017:2665
- https://access.redhat.com/errata/RHSA-2017:2692
- https://access.redhat.com/errata/RHSA-2017:2698
- https://access.redhat.com/errata/RHSA-2017:2727
- https://lists.debian.org/debian-lts-announce/2021/02/msg00032.html
- https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332711.html
- https://access.redhat.com/errata/RHSA-2017:2418
- https://access.redhat.com/errata/RHSA-2017:2553
- https://access.redhat.com/errata/RHSA-2017:2648
- https://access.redhat.com/errata/RHSA-2017:2665
- https://access.redhat.com/errata/RHSA-2017:2692
- https://access.redhat.com/errata/RHSA-2017:2698
- https://access.redhat.com/errata/RHSA-2017:2727
- https://lists.debian.org/debian-lts-announce/2021/02/msg00032.html
- https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332711.html
Products affected by CVE-2017-9214
-
cpe:2.3:a:openvswitch:openvswitch:2.7.0
-
cpe:2.3:a:redhat:openstack:10
-
cpe:2.3:a:redhat:openstack:11
-
cpe:2.3:a:redhat:openstack:6.0
-
cpe:2.3:a:redhat:openstack:7.0
-
cpe:2.3:a:redhat:openstack:8
-
cpe:2.3:a:redhat:openstack:9
-
cpe:2.3:a:redhat:virtualization:4.0
-
cpe:2.3:a:redhat:virtualization:4.1
-
cpe:2.3:a:redhat:virtualization_manager:4.1
-
cpe:2.3:o:debian:debian_linux:9.0
-
cpe:2.3:o:redhat:enterprise_linux:7.0