Assertion failure in Open vSwitch - CVE-2018-17205
Published: December 18, 2018
Vulnerability identifier: #VU16579
CSH Severity: Low
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-17205
CWE-ID: CWE-617
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS condition on the target system.
The vulnerability exists in ofproto_rule_insert__ in ofproto/ofproto.c due to flows that are added in a bundle are applied to ofproto in order during bundle commit. A remote attacker can trigger an an assertion failure due to a check on rule state != RULE_INITIALIZED while reinserting old flows and cause the service to crash.
Affected software
Open vSwitch
Red Hat Virtualization
Red Hat Virtualization for IBM Power LE
Red Hat Virtualization Manager
Red Hat Enterprise Linux Fast Datapath
Red Hat OpenStack
Red Hat OpenStack for IBM Power
Fedora
Opensuse
openvswitch
Red Hat Virtualization
Red Hat Virtualization for IBM Power LE
Red Hat Virtualization Manager
Red Hat Enterprise Linux Fast Datapath
Red Hat OpenStack
Red Hat OpenStack for IBM Power
Fedora
Opensuse
openvswitch
How to mitigate CVE-2018-17205
Install update from vendor's website.
openvswitch - update to 2.10.0-1.fc29