Known vulnerabilities in openvswitch (Debian package)
Vendor:
Debian
Software:
openvswitch (Debian package)
Software CPE:
cpe:2.3:o:debian:openvswitch_debian_package:*:*:*:*:*:debian_linux:*:*
Website:
https://www.debian.org/
Total vulnerabilities:
9
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
3.1.0-2+deb12u1
2.15.0+ds1-2+deb11u5
2.15.0+ds1-2+deb11u4
2.15.0+ds1-2+deb11u2
2.10.7+ds1-0+deb10u1
2.10.6+ds1-0+deb10u
2.13.0+dfsg1-13
2.13.0+dfsg1-12
2.13.0+dfsg1
2.10.0+2018.08.28+git.8ca7c82b7d+ds1
2.6.2~pre+git20161223
2.3.0+git20140819
2.13.0+dfsg1-10
2.13.0+dfsg1-9
2.13.0+dfsg1-5
2.13.0+dfsg1-6
2.13.0+dfsg1-7
2.13.0+dfsg1-8
2.13.0+dfsg1-4
2.13.0+dfsg1-3
2.13.0+dfsg1-2
2.10.0+2018.08.28+git.8ca7c82b7d+ds1-12+deb10u2
2.13.0+dfsg1-1
2.11.0+2019.06.25+git.9ebe795035+ds1-8
2.11.0+2019.06.25+git.9ebe795035+ds1-4
2.11.0+2019.06.25+git.9ebe795035+ds1-5
2.11.0+2019.06.25+git.9ebe795035+ds1-6
2.11.0+2019.06.25+git.9ebe795035+ds1-7
2.11.0+2019.06.25+git.9ebe795035+ds1-3
2.11.0+2019.06.25+git.9ebe795035+ds1-1
2.11.0+2019.06.25+git.9ebe795035+ds1-2
2.10.0+2018.08.28+git.8ca7c82b7d+ds1-12+deb10u1
2.10.0+2018.08.28+git.8ca7c82b7d+ds1-13
2.10.0+2018.08.28+git.8ca7c82b7d+ds1-12
2.10.0+2018.08.28+git.8ca7c82b7d+ds1-11
2.10.0+2018.08.28+git.8ca7c82b7d+ds1-10
2.10.0+2018.08.28+git.8ca7c82b7d+ds1-9
1.2.1-1
1.2.1-2
1.2.1-3
1.2.2-1
1.2.2-2
1.9.3+git20131029-1.1
2.8.1+dfsg1-7
2.10.0+2018.08.28+git.8ca7c82b7d+ds1-1
2.10.0+2018.08.28+git.8ca7c82b7d+ds1-2
2.10.0+2018.08.28+git.8ca7c82b7d+ds1-3
2.10.0+2018.08.28+git.8ca7c82b7d+ds1-4
2.10.0+2018.08.28+git.8ca7c82b7d+ds1-5
2.10.0+2018.08.28+git.8ca7c82b7d+ds1-6
2.10.0+2018.08.28+git.8ca7c82b7d+ds1-7
2.10.0+2018.08.28+git.8ca7c82b7d+ds1-8
2.8.1+dfsg1-6
2.8.1+dfsg1-5
2.8.1+dfsg1-4
2.8.1+dfsg1-3
2.8.1+dfsg1-2
2.8.1+dfsg1-1
2.3.0+git20140819-4
2.4.0-1
2.5.0-1
2.5.1~pre+git20160626-1
2.5.1~pre+git20160626-2
2.6.0-1
2.6.1-1
2.6.1+git20161123-1
2.6.2~pre+git20161223-1
2.6.2~pre+git20161223-2
2.6.2~pre+git20161223-3
2.3.0+git20140819-3+deb8u1
1.5.0-1
1.6.0-1
1.6.1-1
1.7.0-1
1.8.0-1
1.9.0-1
1.9.1-1
1.9.2-1
1.9.2+git20130813-1
1.9.3-1
1.9.3+git20131021-1
1.9.3+git20131028-1
1.9.3+git20131029-1
2.1.0+git20140325-1
2.1.0+git20140411-1
2.1.0+git20140411-2
2.1.0+git20140411-3
2.2.0-1
2.3.0+git20140819-1
2.3.0+git20140819-2
2.3.0+git20140819-3
1.0.1-1
1.1.0~pre1-1
1.1.0~pre2-1
1.1.0~pre2-2
1.1.0~pre2-3
1.1.0~pre2-4
1.1.0~pre2-5
1.1.0~pre2.g1.bbe8d06e-1
1.1.0~pre2.g2.ea763e0e-1
1.1.0-1
1.1.1-1
1.2.0-1
1.3.0-1
1.4.0-1
1.4.0-2
1.4.0-2+nmu1
1.4.0+git20120321-1
1.4.0+git20120426-1
1.4.2+git20120612-1
1.4.2+git20120612-2
1.4.2+git20120612-3
1.4.2+git20120612-4
1.4.2+git20120612-5
1.4.2+git20120612-6
1.4.2+git20120612-7
1.4.2+git20120612-8
1.4.2+git20120612-9
1.4.2+git20120612-9.1
1.4.2+git20120612-9.1~deb7u1
1.4.2+git20120612-9.1~deb7u1.1
Vulnerabilities (9)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU86620 - Missing release of memory after effective lifetime CVE-2024-22563 |
CWE-401 | Medium | 2.15.0+ds1-2+deb11u5, 3.1.0-2+deb12u1 | 20.02.2024 |
SB2024022030 SB2024022036 SB2024022037 and 4 more |
||
| #VU86295 - Out-of-bounds read CVE-2023-3966 |
CWE-125 | Medium | 2.15.0+ds1-2+deb11u5, 3.1.0-2+deb12u1 | 09.02.2024 |
SB2024020916 SB2024030137 SB2024030759 and 11 more |
||
| #VU83434 - Insufficient Verification of Data Authenticity CVE-2023-5366 |
CWE-345 | Low | 2.15.0+ds1-2+deb11u5, 3.1.0-2+deb12u1 | 22.11.2023 |
SB2023112235 SB2023112236 SB2023112701 and 15 more |
||
| #VU74579 - Improper input validation CVE-2023-1668 |
CWE-20 | Medium | 2.15.0+ds1-2+deb11u4 | 06.04.2023 |
SB2023040683 SB2023041403 SB2023041414 and 15 more |
||
| #VU70471 - Out-of-bounds read CVE-2022-4337 |
CWE-125 | Medium | 2.15.0+ds1-2+deb11u2 | 21.12.2022 |
SB2022122109 SB2023011401 SB2023020902 and 18 more |
||
| #VU70459 - Integer underflow CVE-2022-4338 |
CWE-191 | High | 2.15.0+ds1-2+deb11u2 | 21.12.2022 |
SB2022122109 SB2023011401 SB2023020902 and 21 more |
||
| #VU50603 - Improper input validation CVE-2020-35498 |
CWE-20 | Medium | 2.10.7+ds1-0+deb10u1 | 10.02.2021 |
SB2021021021 SB2021021218 SB2021021620 and 12 more |
||
| #VU49910 - Missing release of memory after effective lifetime CVE-2020-27827 |
CWE-401 | Medium | 2.10.6+ds1-0+deb10u | 21.01.2021 |
SB2021012119 SB2021012120 SB2021012121 and 22 more |
||
| #VU48780 - Memory corruption CVE-2015-8011 |
CWE-119 | High | 2.10.6+ds1-0+deb10u | 28.01.2020 |
SB2020012836 SB2020120408 SB2020120409 and 17 more |