Known vulnerabilities in Open vSwitch
Vendor:
openvswitch.org
Software:
Open vSwitch
Software CPE:
cpe:2.3:h:openvswitch.org:openvswitch:*:*:*:*:*:*:*:*
Website:
https://openvswitch.org
Total vulnerabilities:
14
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
3.7.1
3.6.3
3.5.4
3.4.6
3.3.9
3.7.0
3.6.2
3.5.3
3.4.5
3.3.8
3.6.1
3.3.7
3.5.2
3.4.4
3.3.6
3.2.6
3.6.0
3.5.1
3.4.3
3.3.5
3.4.2
3.3.4
3.2.5
3.1.7
3.0.8
2.17.12
3.5.0
3.4.1
3.3.3
3.2.4
3.1.6
3.3.2
2.17.11
3.4.0
3.3.1
3.2.3
3.1.5
3.0.7
2.17.10
3.3.0
3.2.2
3.1.4
3.0.6
2.17.9
3.2.1
3.1.3
3.0.5
2.17.8
3.2.0
3.1.2
2.17.7
3.1.1
3.0.4
2.17.6
2.16.7
2.15.8
2.14.9
2.13.11
3.1.0
3.0.3
2.17.5
2.16.6
2.15.7
2.14.8
2.13.10
3.0.2
2.17.4
0.90.0
2.4.1
2.4
2.3
2.2
3.0.1
2.17.3
2.16.5
2.15.6
2.14.7
2.13.9
3.0.0
2.17.2
2.16.4
2.15.5
2.14.6
2.13.8
2.17.1
2.16.3
2.15.4
2.14.5
2.13.7
2.17.0
2.16.2
2.15.3
2.14.4
2.13.6
2.16.1
2.15.2
2.14.3
2.13.5
2.12.4
2.16.0
2.15.1
2.13.4
2.11.7
2.15.0
2.14.2
2.13.3
2.12.3
2.11.6
2.10.7
2.9.9
2.8.11
2.7.13
2.6.10
2.5.12
2.14.1
2.14.0
2.13.2
2.13.1
2.13.0
2.12.2
2.12.1
2.12.0
2.11.5
2.11.4
2.11.3
2.11.2
2.11.1
2.11.0
2.10.6
2.10.5
2.10.4
2.10.3
2.10.2
2.10.0
2.9.8
2.9.7
2.9.6
2.9.5
2.9.4
2.9.3
2.9.1
2.9.0
2.8.10
2.8.9
2.8.8
2.8.7
2.8.6
2.8.5
2.8.4
2.8.3
2.8.2
2.8.1
2.8.0
2.7.12
2.7.11
2.7.10
2.7.9
2.7.8
2.7.7
2.7.6
2.7.5
2.7.4
2.7.3
2.7.2
2.7.1
2.7.0
2.6.9
2.6.8
2.6.7
2.6.6
2.6.5
2.6.4
2.6.3
2.6.2
2.6.0
2.5.11
2.5.10
2.5.9
2.5.8
2.5.7
2.5.6
2.5.5
2.5.4
2.5.3
2.5.2
2.5.1
2.4.0
2.3.2
2.3.1
2.3.0
2.1.2
2.1.1
2.1.0
2.0.0
1.11.0
1.10.0
1.9.0
1.7.0
1.6.1
1.5.0
1.4.1
1.4.0
1.3.0
1.4.2
2.6.1
2.5.0
2.9.2
2.10.1
Vulnerabilities (14)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU86620 - Missing release of memory after effective lifetime CVE-2024-22563 |
CWE-401 | Medium | 2.12.4, 2.13.5, 2.14.3, 2.15.2, 2.16.1 | 20.02.2024 |
SB2024022030 SB2024022036 SB2024022037 and 4 more |
||
| #VU86295 - Out-of-bounds read CVE-2023-3966 |
CWE-125 | Medium | 2.17.9, 3.0.6, 3.1.4, 3.2.2 | 09.02.2024 |
SB2024020916 SB2024030137 SB2024030759 and 11 more |
||
| #VU83434 - Insufficient Verification of Data Authenticity CVE-2023-5366 |
CWE-345 | Low | 2.17.9, 3.0.6, 3.1.4, 3.2.2 | 22.11.2023 |
SB2023112235 SB2023112236 SB2023112701 and 15 more |
||
| #VU74579 - Improper input validation CVE-2023-1668 |
CWE-20 | Medium | 2.13.11, 2.14.9, 2.15.8, 2.16.7, 2.17.6, 3.0.4, 3.1.1 | 06.04.2023 |
SB2023040683 SB2023041403 SB2023041414 and 15 more |
||
| #VU73248 - Missing release of memory after effective lifetime CVE-2021-3905 |
CWE-401 | Medium | 2.12.4, 2.13.5, 2.14.3, 2.15.2, 2.16.1 | 13.03.2023 |
SB2021111059 SB2023031324 SB2023031325 and 4 more |
||
| #VU70471 - Out-of-bounds read CVE-2022-4337 |
CWE-125 | Medium | 2.13.10, 2.14.8, 2.15.7, 2.16.6, 2.17.5, 3.0.3 | 21.12.2022 |
SB2022122109 SB2023011401 SB2023020902 and 18 more |
||
| #VU70459 - Integer underflow CVE-2022-4338 |
CWE-191 | High | 2.13.10, 2.14.8, 2.15.7, 2.16.6, 2.17.5, 3.0.3 | 21.12.2022 |
SB2022122109 SB2023011401 SB2023020902 and 21 more |
||
| #VU68717 - Out-of-bounds read CVE-2022-32166 |
CWE-125 | Medium | 2.5.1 | 25.10.2022 |
SB2022102559 SB2022102561 SB2022102562 and 4 more |
||
| #VU55006 - Use After Free CVE-2021-36980 |
CWE-416 | High | 2.13.4, 2.15.1 | 20.07.2021 |
SB2021072016 SB2021072017 SB2021102110 and 15 more |
||
| #VU50603 - Improper input validation CVE-2020-35498 |
CWE-20 | Medium | - | 10.02.2021 |
SB2021021021 SB2021021218 SB2021021620 and 12 more |
||
| #VU49910 - Missing release of memory after effective lifetime CVE-2020-27827 |
CWE-401 | Medium | 2.6.9, 2.7.12, 2.8.10, 2.9.8, 2.10.6, 2.11.5, 2.12.2, 2.13.2, 2.14.1 | 21.01.2021 |
SB2021012119 SB2021012120 SB2021012121 and 22 more |
||
| #VU38936 - Out-of-bounds read CVE-2017-9264 |
CWE-125 | High | - | 29.05.2017 |
SB2017052919 SB20170613107 SB2017080328 and 2 more |
||
| #VU38937 - Memory corruption CVE-2016-10377 |
CWE-119 | High | - | 29.05.2017 |
SB2017052920 |
||
| #VU43764 - Permissions, Privileges, and Access Controls CVE-2012-3449 |
CWE-264 | Medium | - | 07.08.2012 |
SB2012080703 |